{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6f0dc8d1-bb47-56c9-ae67-72a5e255013c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-all",
      "version": "4.1.52.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7c3b394f-ea4d-5e91-89e0-025eefdb77ba",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49e4309d-5c76-5156-a520-9efb56233ef1",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21295 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:116fc4c6-723a-5f6c-8f13-648aab8bb778",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2e311cb-21a3-51fb-9517-a0013c8a9672",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b684bdd7-c8ba-5fa5-9e12-0a61c8c5b7f0",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56f58978-9fdf-5dd9-875e-da2241c7c675",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62c63254-274b-507e-9484-33bf0892168c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f3c020-c18e-5332-9ebd-1b9aa6375671",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17630caf-95b1-583c-943c-796da38d3581",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1058477-7016-55f3-adb4-aa0038c528c0",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c46d66-1c6a-59f0-9ded-4a74de8c942d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-all 4.1.52.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:521f210d-7320-5cdb-80c8-0c1edcb46430",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a751390-15df-5f90-bf61-34d51aa4248f",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faa2d617-1842-5a85-88fd-ed79d3fe70c6",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6bffa47-95c5-5e46-ae91-daaf5f86c167",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ca94d35-f2ca-5410-8dae-f9ab84d6caa7",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d3da4f3-f2a2-5929-9892-7d4313c2b6ff",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:638eced5-b9e7-5398-b82a-5e83c7f3b16d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79f39e5a-f134-54b6-ba5e-a09ae8f5d130",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89ec0a45-ff1b-5460-b2c8-b5c12cdda2fa",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6425cbb-bc4c-576e-86f3-833360435c56",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcbb2bf6-942b-50cc-b338-dddc5c4e13c1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c6f0ea-d331-5749-91ac-b29c271ecbd4",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-all@4.1.52.Final-tuxcare.1"
    }
  ]
}