{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:79aa6284-fcde-58b6-b73f-da4ccd765e4b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler",
      "version": "4.1.92.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:94d8cd11-ad31-5e17-80e2-7dc1e9c0f1dd",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0232732f-f5cb-59b2-a98d-1e162d708108",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9af2ff3-323c-5a31-b172-79e273cbe681",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-handler 4.1.92.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73d3f978-459f-5f80-b774-421ffbc7219f",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03122621-ff79-5aa2-beb1-ea55d3554bd2",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec050ab-caa2-58f3-b122-053375e3a914",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f594dc4-4489-5fa7-bc3e-f41c87f1a6e8",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfe92ab1-ad33-5dec-896d-8c0206cb0e20",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db2abb75-3973-5215-9276-892c656fcf6a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6bc0f30-0877-5965-b6ab-2fd0e684097f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:959ce696-f3c2-5a34-9ecc-dddadb9fa1cb",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf7f9a30-39ae-5d9c-b8ac-922aace1e7da",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2809ce40-495c-5644-8696-5b2c80c2d1ac",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08b503d3-f088-5a85-95a7-a013a0d1ffb4",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90835d17-a7ba-57bf-80da-8b0460ffaef4",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:641bb8fd-e399-5c20-a66e-1eddd88e876c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1594c7ee-c4eb-5c51-9754-e01961db730f",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:171749a6-c34a-51ea-ab01-6c0aedc7db92",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c855b2c0-b239-538d-aecd-66c016ea36af",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f167835-5c04-5a90-9a5d-bace1f3fabb5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64953978-a5e4-55af-9091-8789d8b05889",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4116d179-7c5f-5432-8472-5ce4cba977ca",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7c099ad-f471-5526-aef0-7b1a9a78a0b4",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c344991-edb2-5f74-b4d4-49f66c1dbae3",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c49168ef-ffe0-59e5-8367-402a2da4f29d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d593e3d-5fe4-57ee-a274-74732d884afa",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler@4.1.92.Final-tuxcare.3"
    }
  ]
}