{
  "@id": "urn:uuid:34dd74d8-8a9c-464c-9cd6-de595413520f",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 24,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-12T12:32:18.703919+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-31T08:56:00.192484+00:00",
      "status_notes": "Vulnerability CVE-2022-41881 does not affect version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy. not_affected \u2014 CVE-2022-41881 is NOT present in target version 4.1.87.Final. The vulnerability (unbounded recursion when parsing nested PP2_TYPE_SSL TLVs in HAProxy protocol messages) was fixed by upstream Netty in commit cd91cf3c99123bd1e53fd6a1de0e3d1922f05bb2, which shipped in the 4.1.86.Final release. Since the target is 4.1.87.Final (newer than the fixed version), the fix was already present when TuxCare...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-41881"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-41881 is NOT present in target version 4.1.87.Final. The vulnerability (unbounded recursion when parsing nested PP2_TYPE_SSL TLVs in HAProxy protocol messages) was fixed by upstream Netty in commit cd91cf3c99123bd1e53fd6a1de0e3d1922f05bb2, which shipped in the 4.1.86.Final release. Since the target is 4.1.87.Final (newer than the fixed version), the fix was already present when TuxCare..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-12T12:32:18.703919+00:00",
      "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy, and is fixed in 4.1.87.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-44893"
      },
      "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy, and is fixed in 4.1.87.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-12T12:32:18.703919+00:00",
      "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy, and is fixed in 4.1.87.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-48059"
      },
      "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy, and is fixed in 4.1.87.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-30T06:55:02.037135+00:00",
      "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-55851"
      },
      "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.87.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-30T06:55:02.037135+00:00",
      "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-59919"
      },
      "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    }
  ]
}