{ "@id": "urn:uuid:008f1310-5e38-46bd-9b76-55424880cd7d", "role": "Document Creator", "author": "https://tuxcare.com", "version": 3, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-26T11:00:05.020596+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2022-41881 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2022-41881" }, "action_statement": "Vulnerability CVE-2022-41881 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-26T11:00:05.020596+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-handler-proxy 4.1.76.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2024-47535" }, "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-24970" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Version 4.1.76.Final is not affected by CVE-2025-25193. The vulnerability is specifically about a bug in the BoundedInputStream class where null bytes (0x00) are not counted against the input limit due to using `if (b > 0)` instead of `if (b != -1)`. However, the BoundedInputStream class does not exist in version 4.1.76.Final. This class was introduced later as part of the fix for CVE-2024-4753...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 Version 4.1.76.Final is not affected by CVE-2025-25193. The vulnerability is specifically about a bug in the BoundedInputStream class where null bytes (0x00) are not counted against the input limit due to using `if (b > 0)` instead of `if (b != -1)`. However, the BoundedInputStream class does not exist in version 4.1.76.Final. This class was introduced later as part of the fix for CVE-2024-4753..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2025-55163 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-55163" }, "action_statement": "Vulnerability CVE-2025-55163 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-58056" }, "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-58057" }, "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2025-59419 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-59419" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42578 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42578" }, "action_statement": "Vulnerability CVE-2026-42578 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42579 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42579" }, "action_statement": "Vulnerability CVE-2026-42579 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42580 does not affect version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Version 4.1.76.Final is NOT affected by CVE-2026-42580. This version uses Integer.parseInt(hex, 16) for chunk size parsing, which has built-in overflow validation and throws NumberFormatException when values exceed Integer.MAX_VALUE. The vulnerable code pattern (manual int accumulation with insufficient overflow checking: result *= 16; result += digit; if (result < 0)) does not exist in this ve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-42580" }, "impact_statement": "not_affected \u2014 Version 4.1.76.Final is NOT affected by CVE-2026-42580. This version uses Integer.parseInt(hex, 16) for chunk size parsing, which has built-in overflow validation and throws NumberFormatException when values exceed Integer.MAX_VALUE. The vulnerable code pattern (manual int accumulation with insufficient overflow checking: result *= 16; result += digit; if (result < 0)) does not exist in this ve..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42584" }, "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42586" }, "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-44248 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44248" }, "action_statement": "Vulnerability CVE-2026-44248 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-44249 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44249" }, "action_statement": "Vulnerability CVE-2026-44249 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44250" }, "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44891" }, "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44893" }, "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:24:00.107584+00:00", "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-45536" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-45673 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-45673" }, "action_statement": "Vulnerability CVE-2026-45673 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-45674 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-45674" }, "action_statement": "Vulnerability CVE-2026-45674 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-46340 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-46340" }, "action_statement": "Vulnerability CVE-2026-46340 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-47244" }, "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-47691" }, "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-48006" }, "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Version 4.1.76.Final is not affected by CVE-2026-48043. The target uses a different architecture than the vulnerable versions: it processes HTTP/2 decompression directly in the onDataRead method (lines 76-144) with try-finally protection (lines 106-137) that ensures pooled ByteBuf is released even when flow-controller operations throw exceptions. The vulnerable pattern\u2014an anonymous ChannelInbou...", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "not_affected \u2014 Version 4.1.76.Final is not affected by CVE-2026-48043. The target uses a different architecture than the vulnerable versions: it processes HTTP/2 decompression directly in the onDataRead method (lines 76-144) with try-finally protection (lines 106-137) that ensures pooled ByteBuf is released even when flow-controller operations throw exceptions. The vulnerable pattern\u2014an anonymous ChannelInbou..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-48059" }, "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-50010 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50010" }, "action_statement": "Vulnerability CVE-2026-50010 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-50560 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50560" }, "action_statement": "Vulnerability CVE-2026-50560 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-55851" }, "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-56817 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56817" }, "action_statement": "Vulnerability CVE-2026-56817 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-56818 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56818" }, "action_statement": "Vulnerability CVE-2026-56818 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59902" }, "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59919" }, "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59920" }, "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-73507" }, "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-73508" }, "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.76.Final-tuxcare.1" } } ], "timestamp": "2026-10-23T10:23:09.324648+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.76.Final-tuxcare.1 of io.netty:netty-handler-proxy." } ] }