{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a17e9896-80c3-54b1-9b15-3133b084eca0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-native-kqueue", "version": "4.1.92.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:af2b048e-902d-5f25-b163-35b1bd04bf93", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c1689e7-b083-5867-8f50-376a9f7745fe", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5accd71a-943e-5264-8acd-f5f267eb1954", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-kqueue 4.1.92.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a2df873-a8c0-5de1-9fe1-38754c92d559", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b59ac9d2-129a-5596-910e-fc7b40076716", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7feec46c-12b5-5449-96f4-76ad25c04af3", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d88a54ec-0d2c-5611-98d3-ae009c782137", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:556f8bd0-0882-530e-b0cb-a33fe1445eae", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:89a054df-3a6b-5acd-bd80-c0b000698705", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d2a9d94-303a-5412-a680-dffcdc8edc3e", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a7a463e4-e94c-5bbd-9acb-9dea5fb1696d", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9953de57-0a08-55b0-95c4-852e9aedcbdf", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8d92bb42-3900-51d9-b528-76d3898e3028", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:54b6c2dc-47d8-502e-afd4-8de22010d5a4", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eac2ac14-e22b-5b64-8bf7-493d0696cbaa", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.1 of io.netty:netty-transport-native-kqueue." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.92.Final-tuxcare.1" } ] }