{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:350d8304-e859-520c-8804-6a47f7a6c7f4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-memcache",
      "version": "4.1.60.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dbe17450-a9c2-5d22-89c6-8fd6947f25de",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55558875-7327-5995-a91c-45ed59a0aa85",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41f42e06-3f6c-5b4a-9dee-1695da0eea41",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1321ba8-dbb5-5c7e-815e-5afb43d9cadf",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6764ff6-b1c1-5dc1-83d0-6478aeddd650",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:194e4846-0152-58fe-a60c-e69c79aa881c",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53cbe8c2-7420-5262-aa49-8763f2e28c48",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7406a53f-ccdc-5afa-b955-e907b786d5c5",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad481ed3-ae62-5e0b-af72-96a125fb458a",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-memcache 4.1.60.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79cfaf79-cd69-59c7-928a-1e6183f5cffb",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7db7d5ff-b0c4-5a1d-971c-0965a60b1906",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebac0d52-99d6-5d1d-9984-fa4235717792",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a212de8a-375d-5842-9643-ed5539d161c0",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:328ed597-6a58-5d44-9e96-d6826af2e63d",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f468416d-22c5-5888-8322-24e7b7bcb704",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:126ee5e3-0f96-5183-aa83-5a2c2c959ecc",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31876219-e9eb-5721-9f36-94d2e8f30fc0",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb2d4ecb-e666-5183-b1b0-920265f29b01",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b41ce6bc-ab13-546f-907e-9ed498e35a9f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a851a5f3-c508-55f9-b362-75a9e71ccbdb",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc28b9ab-9086-5698-b09b-632d9a38a29e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:518c5ba5-5044-5f23-8550-33c0e122ed66",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1084ed47-e27c-58e5-8f78-4e159037cd91",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68597086-b7b6-5e11-8268-b20044acb96e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e03f3f1-bc30-59ca-8560-028a5a2a1253",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4ebb9be-124c-5623-b742-bba7afdf00ad",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f9dbf9f-6544-5972-8a56-dd5d736f7fa1",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f862154-82da-599c-956c-b981b8306d1e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd8c7c93-8f7f-5dde-a36b-df21acbed920",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ec0999-44bc-5c54-95a3-0bd7a835416d",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d58ff3e-5dc7-51ce-965f-1bb9874abf23",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27c61e68-ea87-55fd-9697-366783e3acfe",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.60.Final-tuxcare.2"
    }
  ]
}