{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6e85503e-5fde-5e65-b671-ffaf017280d2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.92.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:42ca388b-579b-5628-927b-469b8e3a6482",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f86c268-b1fa-5e23-8035-24263f72a3a2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64081076-3049-5fe2-b66c-cb70021afff0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.92.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d155d671-e8a6-54e1-9c54-8ac79288e286",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781ebb9d-2c7d-5d37-8f7a-60c6faae5746",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e62cfe2-24a9-5670-96b3-e0dd13b6bd0c",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b4aa01-86a9-5561-890f-7556723dc9c9",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7f5eff2-3d35-578c-bedf-09b987dba2e0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31cbc8a-2165-5c99-8848-5b15ea99062a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e4850b-200f-5853-bbb9-3c0e7099363f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fede117-590a-5db2-90f9-5b68fa95a30d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfaac9a3-1617-5f49-995b-758a96162844",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d82c34-aad7-5c37-a1c9-15707ee8c50f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d7d8285-e4b7-5367-aba9-9bd779571041",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6e7c6a3-7603-5a35-8419-2ef6556d5b67",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96cfc757-16c9-5d71-9334-7399190d28eb",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f19f1bf0-3afc-56db-af01-7f19ddac4c28",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ee210b-7b7a-57b9-9046-65033b73f32d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9131d09-0f7d-5886-8769-2c8c309ec97e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c630f52-8787-5325-a24d-bbb6aa1fefd5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a3fd8b4-df13-55ee-9f04-4b2184783fa8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298cab01-c2a4-50cf-bd6b-4ad4748aedea",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8fa125-013e-5613-9377-124d4a2987fb",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22868e30-d86a-5aa7-a0f5-639664dd696c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efecdbc0-953d-5182-b1fb-ea12a1d6d613",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f85996c2-a131-585f-808c-b10b711e9206",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5da0dc-069e-5929-bafb-c210d8d968e7",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd488138-07ab-57e2-9a30-5d94b49c968b",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dcb1440-22d8-559f-ba4c-c0d081091dcc",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cafc25e-d45c-5e8e-b0be-8f4253b8bdc1",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d460a8ac-3609-58a3-84bf-3f52681afafd",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7eaef34-3f5a-5710-8505-1f6990d771e6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a07049d5-98f7-570c-bac7-6fbca97ba912",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1800d8-b19d-532e-a063-ea4ec2e6e48f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3ad89e5-db91-5b06-a384-7ab1693c8016",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9b6c833-63af-54ab-8d7b-7b8402db8397",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da1a2906-bb98-590b-a78b-65d0fc22131e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0938396d-a36e-5b3a-b1fd-82018e4c6610",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77d5b54e-ba1a-5887-8eb1-fdeabb9ffdcc",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d0f885f-e4e4-5273-ba41-2cf13d1fe6af",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ]
}