{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e6f1c25e-9cac-5f86-ac58-9c011559a3d7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.82.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:521d4bd3-3f1d-58d2-a7e3-f48653af8598", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9707dbc7-3fb5-51c9-9720-e3c444c5c013", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a25ad54a-7584-5a5d-ba29-c7883f3658e8", "id": "CVE-2023-34462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cf4a26b2-8eaf-5188-a47f-dcc62d91d669", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a2e57f8-bc4a-521f-bd52-cd9554d70a49", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.82.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3457ecea-5347-58a6-828a-5ad3817bd33e", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:482ac769-88cd-5179-9a7c-d0d6704f4dcd", "id": "CVE-2024-47535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d62c2bf3-5a1f-5fb5-aaca-d77a3b3c0e1b", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:daabb1a8-e76f-5a6d-bb9c-5234889d03f1", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1fa1a52-f842-5f02-b3ad-084f4a82d0ce", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5e725112-0f30-55b7-a826-a39b78057b60", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21e74006-a02c-5ebb-a457-dd7b55098650", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:df413267-78cc-53b1-ba81-94698fc89b74", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a09f1d5c-4a43-584d-bfbb-44110fe2859d", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cc973371-a6b2-50ac-acd9-651aa8791e28", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e942f3b8-1b26-585e-a802-346296747653", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6c2c730-11ed-5a4f-956d-0a121069f0eb", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.1" } ] }