{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b90f0943-de8e-56f5-99b6-579f140ea1d1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.49.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0d978481-08b6-5c67-ac1e-45ed7d7c59b3",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21290 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59cea16a-8b20-5047-9f68-57c619be69b2",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21295 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74f105e-2100-5fc7-9eb4-c9abb01d88be",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c697821-d3d1-5078-9c51-fef866ba90f7",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ba377e3-b1df-5d75-9637-99759966fd54",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d44ed2f-953d-5e18-8dd0-809dc029c4e8",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8900571c-ba83-5c45-b610-4486ac65bb2d",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da64f817-0ed2-5b7a-9c39-bd6be0aa0b14",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2aef08e-1c6e-594c-9489-66afdef0b02e",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95757233-0d19-5096-bada-ea2bbee583c6",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f1f9fca-03a7-5239-ad08-e50790f0017f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43f2e0c1-5eb7-527e-84e0-2b5312027bf7",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-dns 4.1.49.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16360516-1070-56a2-ba92-bacf8799428b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17a614ab-f19c-58d4-8665-ddbc1ec50a70",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95b52dc6-a1b5-544f-8b0a-fbbf617c6d0e",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49ca570c-0076-5ca7-98a5-7a5b0a7898e1",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1f1e3e8-4399-5ac5-81a5-f8e4a66683da",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a969464-127c-5e42-8d1d-9bd0b7c8ff22",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15342628-2a31-5ac2-a6fd-29aa6f40f3aa",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce1481bc-3c17-5e7f-8d77-c7cb27ad02b4",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8309e441-ebe8-5645-a423-6cb6232c6954",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c1b9c64-d05f-5a0a-8060-529a8286346a",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5db18bb-6669-5369-ac12-ca49d261410c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa1d912b-bc7d-50bb-b947-5f382227dec2",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.49.Final-tuxcare.1"
    }
  ]
}