{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a4b20713-3a22-5465-87a0-bee06f3eda38",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.60.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d688f285-def3-512b-9db0-ed64584ffc77",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5661b35b-9910-5f20-b9ca-41953fc625d4",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d6705d-087f-5ab4-acdf-6cd3e806dc48",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d075f836-1b6e-5d58-b2d5-efd86bf85cec",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65613fdd-323b-5b0f-a38d-1d987c30cf5d",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f7b2cd-635c-5fd3-85d3-793d33ad5dcc",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb16b019-5234-5309-8224-ef1f821f0e14",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbef4f55-36d3-576b-94e9-ad05e48f11c1",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9802512-2002-5f17-ac79-1e037a23a6ac",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.60.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a1c8079-bad2-565a-8e49-bc2d187c0485",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dad62b1-03dd-5d2f-ade2-0b7b46d14c2b",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2133171d-52e9-5b7f-a528-3287165f4545",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22ffa342-b539-5df8-a0e8-7e61438ce41b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d2748bb-47c5-58a8-b193-c1c68cbd4b11",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c61aacdd-b5b0-52d6-9c7a-cb758242f25b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:493277c1-d060-5727-8c95-26268a0f5ba4",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fc14216-7f1d-5417-bca8-d785a584eace",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd53fbd-d9d2-5707-962c-0b0385c7ae3a",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b40f8830-15b0-5870-b7e0-557dfdee5ff1",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df45d1eb-490c-5ea6-87b2-976186d03bc2",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:090b92a5-0a86-59eb-8c02-90241568ac05",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc076d08-6e6d-552c-bc75-9bd0a395cba1",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c2cbe7c-69d3-50eb-bd96-da582bcfad00",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87063d5e-e9be-570f-822e-e06c99bcbc88",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:248a39e1-9e6b-5002-8c78-45bbc34a45c6",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69dac862-fd8d-5917-bb94-d7cc209ae585",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a91c840d-0ac5-54f7-8b22-ea9fb6001732",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87055564-a73c-5f49-b90b-eadb760731b6",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bde4e21c-a5bf-53da-a3c1-10d599700065",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a00f7a9d-5f3c-567c-b061-91e9293c7c83",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e841e3a-6eb1-50d5-b6d7-ee963ec3b0af",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae479315-3747-5678-a3c3-8cca0b579dcf",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5df7103-66e4-5f9d-bbd4-054df36a2327",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfbc648a-d9e3-54ba-a028-7fbabe9678d8",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93ca1633-cc83-5373-bfd1-c672dd5b33fb",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6629973d-8aa6-5bdc-b3ec-951f1cce0a16",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f215715e-7948-5d31-a4af-ccf66b78b541",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3267b0-8724-5819-95c0-20e371a22422",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e4c850-3045-5afc-9d37-8b848d1c1bd1",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e34009c6-3e01-5b57-a853-dc9da77f5476",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29216377-9f23-58ac-8b9c-08bb084c9f62",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d1899c5-7b66-5621-a5af-694b265d93fa",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a9c5b52-67d8-5d08-a41b-4447f30b6bac",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd60053a-cfb6-54ed-9b56-b73058c3f650",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02bd520f-9e5f-5e82-b385-14936c8606d2",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d6bee1c-2464-581d-b87b-49b5c1e93969",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.60.Final-tuxcare.2"
    }
  ]
}