{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9f34a1ea-790b-50e6-b424-9ee34ab6860e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-classes-epoll", "version": "4.1.92.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:febc4161-8a81-5719-83b9-9556e7e56e3a", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c57c6304-bf06-5d20-b732-64a2267f64c3", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b0337ffd-1ed6-5536-b523-dd997a9310b9", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-classes-epoll 4.1.92.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51f0a809-23a1-5443-9992-c5dadd40da9f", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5fb9be4e-2b6c-5738-aae3-44f8d0a89b94", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03e4e5e6-2810-54e6-bb78-2ab1a55ae259", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ec37ff4-bdcb-562e-8117-d913c15f2642", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b2b5063-29d1-5640-937b-800cf0bd3cb4", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dbda4120-8755-5261-bd26-7786b0cc687a", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a20d4266-afe1-5d55-9374-906f9009f398", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5c2f15b2-ba40-546b-8730-d53fe77414e2", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d48f55d3-ad40-5cfd-9374-16049e9c7309", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e2d409b-e261-5b8b-bcce-05363ea693f1", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b21b0e08-b5a8-590c-b0e2-107238adce3a", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6320d000-a080-538f-97f7-0ce3771b7180", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-classes-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.92.Final-tuxcare.1" } ] }