{
  "@id": "urn:uuid:7315be21-f665-4254-9647-03c2c381587b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-22T17:38:00.552899+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:16.596724+00:00",
      "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-24970"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:16.596724+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2025-55163 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-55163"
      },
      "action_statement": "Vulnerability CVE-2025-55163 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-58056"
      },
      "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:38:00.552899+00:00",
      "status_notes": "Vulnerability CVE-2025-59419 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-59419"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:16.596724+00:00",
      "status_notes": "Vulnerability CVE-2025-67735 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2025-67735"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-33870"
      },
      "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:26.686691+00:00",
      "status_notes": "Vulnerability CVE-2026-33871 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-33871"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-41417"
      },
      "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42578 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42578"
      },
      "action_statement": "Vulnerability CVE-2026-42578 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42579 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42579"
      },
      "action_statement": "Vulnerability CVE-2026-42579 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42580 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42580"
      },
      "action_statement": "Vulnerability CVE-2026-42580 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42581"
      },
      "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42584"
      },
      "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42585"
      },
      "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      },
      "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-42587"
      },
      "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:35.866702+00:00",
      "status_notes": "Vulnerability CVE-2026-44248 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44248"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-44249 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44249"
      },
      "action_statement": "Vulnerability CVE-2026-44249 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:35.866702+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44891"
      },
      "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-44893"
      },
      "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:26.686691+00:00",
      "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-45536"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-45673 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-45673"
      },
      "action_statement": "Vulnerability CVE-2026-45673 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-45674 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-45674"
      },
      "action_statement": "Vulnerability CVE-2026-45674 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-46340 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-46340"
      },
      "action_statement": "Vulnerability CVE-2026-46340 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:35.866702+00:00",
      "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-47244"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-47691"
      },
      "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec. not_affected \u2014 Target version 4.1.113.Final is NOT AFFECTED. The vulnerable code pattern described in CVE-2026-48043 does not exist in this version. The CVE addresses a buffer leak in a ChannelInboundHandlerAdapter tail handler pattern where buf.release() was not protected by try-finally. However, 4.1.113.Final uses a different, older architecture where HTTP/2 decompression is handled directly in the onDataRe...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-48043"
      },
      "impact_statement": "not_affected \u2014 Target version 4.1.113.Final is NOT AFFECTED. The vulnerable code pattern described in CVE-2026-48043 does not exist in this version. The CVE addresses a buffer leak in a ChannelInboundHandlerAdapter tail handler pattern where buf.release() was not protected by try-finally. However, 4.1.113.Final uses a different, older architecture where HTTP/2 decompression is handled directly in the onDataRe..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-48059"
      },
      "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:16.596724+00:00",
      "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-50010"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:38:00.552899+00:00",
      "status_notes": "Vulnerability CVE-2026-50020 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-50020"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:35.866702+00:00",
      "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-50560"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-55831"
      },
      "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:38:00.552899+00:00",
      "status_notes": "Vulnerability CVE-2026-55833 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-55833"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-55851"
      },
      "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56745"
      },
      "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56746"
      },
      "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:38:00.552899+00:00",
      "status_notes": "Vulnerability CVE-2026-56817 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56817"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec. not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation path, where retained ByteBuf references and aggregate state survive codec exceptions. The vulnerability requires the maxElements and maxNestedArrayDepth configuration features, which were introduced in commits e51c64c964 and 728c98b8ec (June 2026) and first released in version 4.1.135.Final. The target ver...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation path, where retained ByteBuf references and aggregate state survive codec exceptions. The vulnerability requires the maxElements and maxNestedArrayDepth configuration features, which were introduced in commits e51c64c964 and 728c98b8ec (June 2026) and first released in version 4.1.135.Final. The target ver..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56819"
      },
      "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56820 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56820"
      },
      "action_statement": "Vulnerability CVE-2026-56820 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56821 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56821"
      },
      "action_statement": "Vulnerability CVE-2026-56821 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56822 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-56822"
      },
      "action_statement": "Vulnerability CVE-2026-56822 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59898"
      },
      "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59899"
      },
      "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59900"
      },
      "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59902"
      },
      "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59903"
      },
      "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59919"
      },
      "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59920"
      },
      "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-59921"
      },
      "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-73507"
      },
      "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-73508"
      },
      "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:38:00.552899+00:00",
      "status_notes": "Vulnerability CVE-2026-75595 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-75595"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "CVE-2026-75596"
      },
      "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec."
    }
  ]
}
