{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:30df2f43-3c45-57e1-bb5c-ca0450674d36", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-native-epoll", "version": "4.1.92.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:cb540484-0757-565a-9fa0-96a0b909ab26", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:da2f8af8-f532-5530-accf-d2187f305b3a", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c12629a1-82f5-5a25-85db-6c7628a13379", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-epoll 4.1.92.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:37462624-a565-58d2-8a02-0cb5176b7041", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99f535c9-ff70-53ee-802d-a3b1efb74028", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f07012f8-dbea-5410-9a07-23b0b660b0ac", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9777c4c9-4365-5ff0-bb11-24f4a0531227", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad78e7af-8f83-5dde-a204-22eb61e96350", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f85be67f-c7f4-53e5-86c4-7e41589df890", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eff6ebf4-90f6-58e1-8fb9-cc391b6e854b", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92e5e649-1053-51f4-8d9d-3c720ab3ae3e", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c25fbd6-b8e0-5a5b-8faf-3f5edc129709", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e0a3c16-be3d-51c1-9665-a0c4131d9026", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:57b7c5dc-e180-5ca2-89a0-98740f8f5809", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66c5bb2a-793f-5e9c-a54a-8e9e1cfdfc71", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.92.Final-tuxcare.1" } ] }