{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a22a06aa-32f6-5d3c-b1b7-6d6ea79b0ab0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.60.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c4e8ffe3-3124-5474-916e-f39aef37d38f",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c540a26-cabe-59e8-8b78-08929e5f6455",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:defb19d3-fc46-5e48-8ae6-3270258888da",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:046cc40b-1165-561e-89d6-5000845d5097",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86c0f2c9-36d1-5be2-8dd1-29f4919fa93c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39e5b18b-c00d-596f-8102-f7f40119e0ac",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f254e4ec-eb76-5acc-878d-a010351cd69e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4deb7681-ce4a-546d-a5c7-ec28e5cfd6ba",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc0a601d-640b-54df-be04-b78a1fde7fc0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-dns 4.1.60.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:538b3130-b32f-585b-ac6b-cb910ca0336a",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919a1893-06c2-5020-9a8f-e6e7e4b6aa5d",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1002a485-9102-5cb9-b09b-d12094dd3248",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c044c48-df04-5d48-9aba-bbaef0090afc",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:952253a0-f51f-5f61-8cc8-0312e90fd651",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f1ce884-e2d9-54da-a615-fd31bf56d55b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2677bf84-58d0-5dc9-9bc5-235c11eefa75",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153fef46-58e1-5387-bf87-9c19e3727f4f",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4e097b1-aa31-5443-b50b-56ecde8d6497",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e2952a7-4c46-5a30-b6f6-7a5c5eee9b28",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe8759e2-ba8d-5e3a-9c50-f0994975610c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bedf3a9-3ac7-596d-891d-37b28cddd490",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.60.Final-tuxcare.1 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.60.Final-tuxcare.1"
    }
  ]
}