{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:95b7a6d2-d96a-59fe-8687-fb7fb4170e1f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.63.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:173741e9-5fa4-52a7-99ba-0e45b1cce7b7",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59822c87-5ef5-5c5e-a6ad-e84a1e0dd938",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234b054f-995e-5846-9d3f-da5d3e2ab446",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:481f31af-ca8c-57be-912e-67db57c469fc",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a56ab3-53d4-5aec-9575-06bec62f383d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8b316de-bb5c-543e-8474-ddcdc46fada6",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0c4675c-1803-5ebd-bce5-fb255b5b2a0f",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb30188d-d638-5ff9-b729-b4e87e9e7322",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4278f940-d5d2-5b94-a36e-faaf425ee70d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-parent 4.1.63.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:643e2dd7-82cd-5fc8-a546-2f78b9d69e84",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6fc8106-bcfa-5c72-8fd5-7d04c7d41458",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:762a3a39-c925-5669-b0a9-1226f3264082",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6a356fd-666c-5c4d-97d9-ab28bb1db5be",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8d298de-0d04-596f-82f2-75a73c18adda",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5d2b820-13b8-54f2-8bdb-2c20eeecf1c7",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bbe0a91-0279-5a7a-bb7f-b9e0e8c2583f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a83c83a-bf6d-5a3a-9289-8b979af435d9",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6886e457-fb3b-5764-bfc7-7c8fe3f204c0",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a52a412a-faf9-5c83-ae79-28e49080ee65",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64d156a6-01f7-5267-a26f-d2c6786c74af",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a96d3c15-f71e-5718-88b6-a10e11a6e366",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f8eeb83-ffa2-5c40-b674-91e235afb604",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45676fa0-da17-5ebe-bd5e-e56509f70eca",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e01ea4e5-4cf6-5370-b503-1072d0be2a5f",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8537286d-6957-5458-921a-a99e03b2c0a5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceb28d9c-2bcd-5491-8358-0e15ef9dae05",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da1d815e-e744-57b8-af01-f110757f839a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca0e7f55-db1c-5a9a-a246-207af65db8cb",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a3affe4-c42d-5113-b5d9-4350a08ca230",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0c8d3c3-df62-53a3-8f97-806fb842a25d",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80c77ed8-bd1f-50e8-a8c0-24466c688238",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2731f7fd-83b8-5924-bacc-ac42017e25df",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.3"
    }
  ]
}