{
  "@id": "urn:uuid:f3b10ef6-d697-4bd4-ae74-6fc9bdb61f39",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 15,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T07:38:00.043306+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T07:38:00.043306+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis, and is fixed in 4.1.42.Final-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      },
      "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis, and is fixed in 4.1.42.Final-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T07:38:00.043306+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis, and is fixed in 4.1.42.Final-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      },
      "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis, and is fixed in 4.1.42.Final-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation check (throws without calling releaseAndClearDepths). The target version 4.1.42.Final does not have the maxElements feature, maxNestedArrayDepth feature, or releaseAndClearDepths method. These features were introduced in later commits (e51c64c964, 728c98b8ec, ced30adba2) after 4.1.42.Final was released. Th...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation check (throws without calling releaseAndClearDepths). The target version 4.1.42.Final does not have the maxElements feature, maxNestedArrayDepth feature, or releaseAndClearDepths method. These features were introduced in later commits (e51c64c964, 728c98b8ec, ced30adba2) after 4.1.42.Final was released. Th..."
    }
  ]
}