{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:432a97c1-dbbb-54a3-8eed-235d86d4690e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.58.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:76cbbd2f-63a5-5c8f-96d3-39b707eaf27e",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd6ca63a-c5f9-575d-af76-98589b63d45a",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21295 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80d5ca48-c316-5318-ba4a-a9e612663058",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21409 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe8c3177-5e98-5504-8cc5-556000c5ac47",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2b4f479-4f74-5fcf-8ad5-9468c1d6e073",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84dc8c8c-f7a6-5c81-9523-1334aef4ea40",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62f08e37-a064-5290-b71e-3d6cceca7688",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a75ebbd-a40c-56e6-87fd-90ceb9c80e9d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c7044d5-ca77-540f-a933-48aed4ba9c86",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3963049a-035f-59d2-bc4f-39c004edc937",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-parent 4.1.58.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65ab8a3e-7528-5b05-a5e9-fb835fe25483",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e74926ff-6037-5778-843a-6e554df017c8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f463a9-56b1-5b8b-bacb-3fe720a7494d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb67a1e0-66a6-5685-8879-a954c585303e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab5746b5-a198-5a5a-954d-af884bc89228",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fe04498-de2b-5790-ab54-2751f1f1873e",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0157300-fb95-5f07-ac15-9261b92c29bf",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c57ce30-f823-50c3-add3-3c7c445507a6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1cdf323-ad43-5da5-9c2a-db71c9f0dfdf",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47a10781-af4e-557a-87aa-6b44819cb4db",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9db65c80-f3b8-5b22-a38f-ec03b5db494c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6eb01b38-3352-5629-bfa0-c36db8acd5a1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ea25b7f-c30c-5188-ab76-17c6f1ebba93",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22bdf903-d22c-5176-a85f-9d3982c7ad36",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb1a917b-8c1b-582c-a365-dee9974dae0a",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:399ef70b-23df-5488-b837-85c013c941c9",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2f7d69f-28ab-52a6-bda6-5e410907e087",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3dc7bcb-532b-5e49-9265-cc4127d4f674",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7a25bb3-1d28-5fee-8fd4-e8fcbb028576",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:900bbd17-8dae-539b-92ae-9e6ac0bc0f2d",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b84dbc2e-da41-5a01-8170-4bab956fec5a",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5993e3f-edbd-5672-8c33-87fdb59557cb",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f0ee5e5-f0ab-5352-b1ee-427a9ba54b24",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.58.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.58.Final-tuxcare.2"
    }
  ]
}