{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cec8c53d-c4a2-55bb-a5dc-1ff2ca830e40", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.93.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:534820e4-b1c4-5992-a565-05b6a00d78c0", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1287b428-550d-5153-8d69-fd2013c44aa2", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bba6b341-8f2d-52c3-8f64-32c349638a94", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.93.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:013bd10a-5552-530b-a022-2c99f0695442", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ddc1a44a-b1e1-503f-9fae-8c5879d480a7", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8722b3c5-b1c6-5df8-8e47-7451d86d0c43", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa110874-40aa-5487-94b5-4c161029dbd0", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3de9f156-6a17-5c01-b46f-3043dad507d0", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:385a5164-d28e-5818-8f59-f99304dc9497", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87cac6d6-9302-5600-aae0-32bd5d5b0729", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:361909bf-8970-51e9-b62b-6093d7ccdd2e", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0953049f-cc0a-560b-b367-66528fbf7522", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5ab45d93-8395-53d3-8001-5a16609bffaf", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e1c2450-7d73-5077-b9da-1fbb960f1a0f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f53c498b-e7a4-5bf3-93b6-b054929d48bc", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.1" } ] }