{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:19bf363b-052f-5097-8f03-aea98cfc198b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-testsuite-shading", "version": "4.1.92.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b224deda-bc07-5da1-be61-800507ff2026", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73894407-71f9-549a-a246-afae1bfc4842", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2126b415-b748-519d-8d27-d24f90bc72ed", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-shading 4.1.92.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0cfd2706-104c-5163-ad2f-bea4e842f002", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f53c19a-a468-5ea4-b245-15adb9a4d540", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f1e4590-72ac-549b-8040-9742710718c4", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7aa77ec5-1733-5eaa-b4f7-f378a0ee70fa", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:37c7b94e-2155-5c2d-bc69-0e4af2fa0fec", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:266fad98-50c5-5ede-89bd-4b77b191a0b3", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8e9a925-ca45-561f-8cf0-ad87982a7cf2", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:967dcc56-d656-5579-b4f3-7890fd1d8c97", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b928024-d0e2-53df-8863-3d266f2612de", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bbdb648e-9198-5b5f-a34f-2ce63347d4e8", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5fa4cc7-eede-5edf-affb-1c9f35280762", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4edb2866-e8f5-5d37-8fb3-1965a2bf0d42", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-testsuite-shading." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.92.Final-tuxcare.1" } ] }