{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8145dd0d-ad2e-559f-b83a-2dc56b9fe954",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.52.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8661c479-ff95-5858-8d32-cc46bdb34bed",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:203b5ee6-a8bd-5434-9629-e93ec00ca681",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21295 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c75626e3-584f-554f-bef8-94f5a2211b91",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67bfaa1f-80b0-5c87-bf86-0a1b38523b0a",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a5b133-a7cb-5426-9e5e-560d6dd2014d",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4018488e-824d-5205-bd01-7e17da660f63",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79bcd04b-248e-5d14-8eb4-73e0462a1cca",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2007b2ef-5a48-5893-8fd7-af97b8ff8df8",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:141d51bf-662a-55ab-84c1-a4042438cdd0",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d381f53e-9c45-5f6c-a809-284a38ec33a3",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1253744-387f-53c6-b16a-2cef0dd85478",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.52.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09656b09-cdf5-53ab-af3a-ccd6b0abc0ef",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1277194d-902f-544c-9db4-0bda61fc88e1",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5019ee2-35b7-5dcb-838c-f6cd25170572",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c29efb5-04ef-5ebb-89aa-c0f0589d4b9b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12fbc206-2b60-58e6-b419-7ca8b44057d3",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf90f0e-4c7e-5fb6-9e97-84a1e3e15525",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e47faf9-d28e-5378-84a4-cda33a5f8fca",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae88d863-7e63-55e6-b59b-5715d2a02c7e",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb02b49-0ee8-5be8-b1bf-afbf4565f8fe",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e970388-5915-5dc9-be9d-bec9048ed201",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae156230-53e9-56b1-a7d6-8ba50d048a7c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a3594cd-608b-5a8a-b824-3f9a18eece8d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.52.Final-tuxcare.1 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.1"
    }
  ]
}