{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6579276a-5f82-5b67-9e22-94bd4ea13eaa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.82.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0050c291-89ea-5498-a68f-cb6ff5563eff",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2d6ad6c-ae7d-5c12-bbe4-2836a79bd73d",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:541239d1-5c78-5e13-a634-d077e028c8ca",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:086e67d1-60b2-5434-a53b-e27666fa4e5d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97d30f63-2e48-54eb-9648-b05930250416",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.82.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3017c779-1b18-5620-83df-b97a9e7ff399",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5afb4ee4-b55b-5985-9bfb-fc4a37e9dba8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9991257c-ad35-55f7-872c-1cd9f24f4952",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad819927-0f77-50a6-b6e3-a056e4394564",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a99e4f0-5eee-5010-b80a-6aa80bdbb52a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e2a13bc-9081-504c-bea3-5925c5715854",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:154bd261-051a-5bc1-8828-082c4ea6189b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a605c40d-681c-5584-a26f-fb994d2643c6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce2c2cdf-fa3b-5f61-b823-136a658bf6cf",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ae665b3-51ac-550f-90cf-5a4a377a583e",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:478fc3da-5247-54c2-976c-324b1383c982",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8727666-6138-526a-99b4-c3d94e05ed9e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9945d4-ceee-5fc1-afed-e57b3497f1c7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ae0b68f-95cb-5f13-9b86-430b97f36785",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4911f76e-25af-5551-bf2d-e0da9813c291",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3019e365-f58e-5cdd-b16f-191fac2d5c4e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb763e1-1fb1-57d8-9676-cb51d4eaa6b6",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97f5bb5b-6927-5813-8a41-c87082b1e880",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c4acd3-fc78-5599-b1f9-527f6db68c5b",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:922b50e8-4406-5578-a16c-e35fa5895e7e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c72d42a-caa6-50ec-9f34-e8153fcfe5f4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2845c96-6655-56ce-b073-3c02eea1e605",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6bbc6e9-fc75-5255-a26e-ab9388d0f6b0",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42dc5d6d-d7b8-5026-bee7-f9d9561e78cc",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778dda1e-820e-541c-b98a-55fdf775fec6",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6c4f55a-40c4-5d11-a2d0-8f8ec6625fa8",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e07f77a-3e57-5546-a71a-0b596bbda895",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7005ebe9-86bd-5f31-9c86-d7e540f3690f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ef127ec-1f99-59a5-8db0-6775ca2255d0",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1ba6580-5128-5091-b83b-64ea6cee8616",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62c3c350-eb7c-50f1-b19d-40d3a9b8321f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:439c620d-d9da-5619-ba6e-7c2611897402",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9984ecb-5871-5fa2-b828-2e7d9914b388",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01a2612e-c7a1-5610-98fd-86a5262dc799",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6a39082-f8fb-56f0-a4a5-f1996455cf1d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0983dd4f-43fd-583e-a9af-d9c759414b2f",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1637d538-bc2a-5bfa-bd4d-ccff36b3abc1",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.2 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.2"
    }
  ]
}