{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:77bc2ddf-fb01-5b6e-acf5-e54278073309", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.82.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:67d08765-4358-5e55-810a-58350d1df4da", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03a7d87f-ed02-5083-9a9e-a4e4fa07750f", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:183c86ad-6cb8-5fbd-9656-ba94920573b5", "id": "CVE-2023-34462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ad1111f-d848-5730-8ab4-9d423f4b43bd", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22016c38-ca27-5367-a355-b42ab8d4f6f6", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-all 4.1.82.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9cbd91f1-19af-5306-aa71-aca4ca4c9948", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4fb52d3-65a1-5bef-b02a-a9a18ed03e1a", "id": "CVE-2024-47535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6b5ed32-a548-56da-b7d6-266ad9fedd39", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d47a751-df6e-5705-9f6a-e9d7bd4eebf6", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c789ea7-8f8b-571f-887a-13c2bc5c3ea2", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bfd0f191-025e-5a85-896e-2db64f031cf3", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7a23c44-ff87-5916-85b7-f0daf5b7f6b5", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31ac23b3-e01b-5730-bc87-52040501161f", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a9919ce-574a-5cbd-be02-1b3ef6d705bd", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d46f764b-335b-5ef2-b61f-c4ab652e390e", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2ac720a-5574-59bc-97a0-7e9332a1c23c", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:24f6d533-57a1-5a98-b394-0de8b3ff500c", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.82.Final-tuxcare.1" } ] }