{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1a95f0fc-ce1f-5823-bbc4-65a6d866f39b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-redis",
      "version": "4.1.63.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:64482c8b-08f3-5086-aa48-de21cc098ff6",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82b51b0b-7b9f-5071-b30f-6708cc09de1f",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37137 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdb5e961-4466-5e78-a94c-2b6ccd4f2f5a",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:316b6517-d8d6-533c-b6c6-7e1ca91b2fb5",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24823 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf0bdd6a-11f9-51c3-a57d-af473e468738",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e1a5ee2-4bcf-5268-b633-b87aea93a0c7",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a676ccf8-772d-53ef-bab8-be57da2b4a30",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e65faed2-c7e4-51d0-a450-d64407a81812",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a6645f-78ae-58f5-86ea-7fecc81d7136",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-redis 4.1.63.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a71d5ca-e3ea-5c0d-9591-12896440dfe3",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e62d125-bcd3-581e-83e3-4e90e57b6297",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61b6abca-60ce-5414-b956-dffc64fbe182",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6eb370-98f9-5335-8574-14ffa2f1f987",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:477a8a5c-666a-5b31-aae2-6f81f9756040",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:365ebc56-f354-5d4e-8824-549260a9df07",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:482f7fdf-cdb6-5b4c-be5f-2ce965062908",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6f64beb-7934-568a-90a9-3464e6b99c7d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b2ad53-ee57-570f-9249-3f88f90a27ff",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78b27016-bfad-5f82-a724-f259ad61aa65",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aec6407a-f35b-5be8-8079-54d54481f029",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e154d48-c263-5c23-bec9-5d2840162847",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.1"
    }
  ]
}