{
  "@id": "urn:uuid:c1fa0a5d-0ae3-4b69-8cb0-676f392adbef",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-23T09:03:47.661798+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-21290 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-21290"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-21295 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-21295"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-21409"
      },
      "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2021-43797 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2021-43797"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2022-24823"
      },
      "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2022-41881 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2022-41881"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2023-34462 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2023-34462"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.53.Final-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2023-4586"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2024-29025 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2024-29025"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-24970"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2025-55163 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-55163"
      },
      "action_statement": "Vulnerability CVE-2025-55163 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-58056"
      },
      "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2025-59419 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-59419"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2025-67735 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2025-67735"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-33870"
      },
      "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-33871"
      },
      "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-41417 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-41417"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42577 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42577"
      },
      "action_statement": "Vulnerability CVE-2026-42577 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42578 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42578"
      },
      "action_statement": "Vulnerability CVE-2026-42578 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-42579 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42579"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42580 does not affect version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml. not_affected \u2014 Netty 4.1.53.Final is not affected by CVE-2026-42580. The vulnerable code pattern (manual chunk size parsing with inadequate overflow check) was introduced in upstream commit 60e53c99 (March 2026), well after this version's release (October 2020). The target uses Java's Integer.parseInt(hex, 16) which has built-in overflow validation that throws NumberFormatException for values exceeding Intege...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-42580"
      },
      "impact_statement": "not_affected \u2014 Netty 4.1.53.Final is not affected by CVE-2026-42580. The vulnerable code pattern (manual chunk size parsing with inadequate overflow check) was introduced in upstream commit 60e53c99 (March 2026), well after this version's release (October 2020). The target uses Java's Integer.parseInt(hex, 16) which has built-in overflow validation that throws NumberFormatException for values exceeding Intege..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-42581 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42581"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42584"
      },
      "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42585"
      },
      "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-42587 does not affect version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml. Version 4.1.53.Final (September 2020) does not contain the vulnerable code pattern described in CVE-2026-42587. The CVE describes a vulnerability where HttpContentDecompressor's maxAllocation parameter is not passed to BrotliDecoder, ZstdDecoder, and SnappyFrameDecoder, allowing decompression bomb attacks via br/zstd/snappy encodings. However, this version predates the vulnerable code by 3-5 years: brotli/zstd/snappy decompression support was added in 2023-2024, the maxAllocation parameter was added in 2025, and the CVE was fixed in 2026. In version 4.1.53.Final, HttpContentDecompressor.newContentDecoder() only handles gzip and deflate encodings (lines 54-70), returning null for all other encodings including br/zstd/snappy. No code path exists to decompress these formats, making the attack described in the CVE impossible.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-42587"
      },
      "impact_statement": "Version 4.1.53.Final (September 2020) does not contain the vulnerable code pattern described in CVE-2026-42587. The CVE describes a vulnerability where HttpContentDecompressor's maxAllocation parameter is not passed to BrotliDecoder, ZstdDecoder, and SnappyFrameDecoder, allowing decompression bomb attacks via br/zstd/snappy encodings. However, this version predates the vulnerable code by 3-5 years: brotli/zstd/snappy decompression support was added in 2023-2024, the maxAllocation parameter was added in 2025, and the CVE was fixed in 2026. In version 4.1.53.Final, HttpContentDecompressor.newContentDecoder() only handles gzip and deflate encodings (lines 54-70), returning null for all other encodings including br/zstd/snappy. No code path exists to decompress these formats, making the attack described in the CVE impossible."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-44248 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44248"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44249"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      },
      "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44891"
      },
      "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-44893 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-44893"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-45536"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-45673 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-45673"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-45674 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-45674"
      },
      "action_statement": "Vulnerability CVE-2026-45674 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-46340 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-46340"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-47244"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-47691"
      },
      "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-48043 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-48043"
      },
      "action_statement": "Vulnerability CVE-2026-48043 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-48059 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-48059"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-50010 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-50010"
      },
      "action_statement": "Vulnerability CVE-2026-50010 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-50020"
      },
      "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-50560"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-55831"
      },
      "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-55833"
      },
      "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-55851"
      },
      "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-56745"
      },
      "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-56746"
      },
      "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-56817 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-56817"
      },
      "action_statement": "Vulnerability CVE-2026-56817 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "action_statement": "Vulnerability CVE-2026-56818 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:03:47.661798+00:00",
      "status_notes": "Vulnerability CVE-2026-56819 is fixed in version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-56819"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59898"
      },
      "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59899"
      },
      "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59900"
      },
      "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59902"
      },
      "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59903"
      },
      "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59919"
      },
      "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59920"
      },
      "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-59921"
      },
      "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-73507"
      },
      "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-73508"
      },
      "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-75595"
      },
      "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "CVE-2026-75596"
      },
      "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.53.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:01:33.961631+00:00",
      "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml.",
      "vulnerability": {
        "name": "GHSA-xpw8-rcwv-8f8p"
      },
      "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.53.Final-tuxcare.1 of io.netty:netty-codec-xml."
    }
  ]
}