{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a8f8dc1e-41ba-59d3-a713-9bf75d674dbf", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-sctp", "version": "4.1.93.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7e2440ab-31f9-5a20-b107-c643c88938bc", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d3078f7-fdd7-5cf0-a74e-bc1b2ef1697b", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66b1a4a3-9cb4-5a22-adb7-dabd897b658f", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-sctp 4.1.93.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ebabff8-0806-5fae-b611-9f931330ff25", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:65a2a373-6dc8-5761-9dce-a71026002180", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05a075de-f1e2-5bc8-8445-66bae64c98ec", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d141932-0044-5016-91dd-ad46a91bc950", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5187d1b-bc69-54a5-b322-13f7d252fda1", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db9b8667-ccda-515d-a50d-0d542b457c35", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b1676353-0484-5d5a-a422-e33092f46adc", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45d5d753-1a1b-5787-a849-75e06719e02f", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9d2b315a-f7d8-5a8c-9370-18077f180d35", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5370e319-4473-58dc-8447-3fe19d68e20e", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d25acf5-c4ff-51cc-a860-a9f63c84ef8d", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3dbb8c65-0ae5-575d-91ad-d7a1d38f72e2", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.93.Final-tuxcare.1" } ] }