{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9f95ccdb-9c07-5bf7-ba73-52b6e7fd5c20",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.48.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d320f927-e3c7-5977-b87b-d99fa90251c3",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c16b5d2-63c5-535d-9d2a-b71a5daee6a7",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21295 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:789f8b45-2a81-5f15-9424-296d32bf37e6",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21409 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d7c0d16-646d-5589-ba28-4348362e6b61",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37136 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d3fbeda-bf7d-50bd-a714-c6eca5c4d37f",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:525853ad-ca43-5ba3-8408-276b0f187004",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b4091d8-68eb-5267-93fe-4fe0852f00b2",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24823 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd54cae0-e0f7-5f8e-ad16-58040152d420",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a81a243-be3e-5d85-a140-d16292040d59",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:545b5a22-0792-5cf7-ab1c-6588d149af9f",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82509140-699d-57a6-9ad4-1004f9e5845d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d26b3b0e-0e63-52cf-b29c-b4d58210c46c",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-dns 4.1.48.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b414fdd6-2337-55c8-abe0-d2fa67261e33",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16b46984-c025-5b75-ae89-936f559b0274",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e82a66fb-93e5-5a39-80dc-d52065839e84",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1330a2a7-a9c7-58c0-bdbc-be81b0d941ce",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caf8a5b6-cd12-5bb4-bfdc-a557d4b50228",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88e35f78-a5df-52ad-a94b-45f4c9007364",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f4b4617-48ba-582a-a633-8b68926cacaa",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8737b968-d871-5ae9-8e91-977ef06d9d20",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a587d987-4418-5ba6-a348-7240e9488275",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0deed61d-55f3-592f-b508-c2fa24c828dd",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:735a2765-ff5b-54f0-bc38-0bc17038db0f",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf82a55f-ad58-555b-b13f-a641ac32f38e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.48.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.48.Final-tuxcare.1"
    }
  ]
}