{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ee6eadb8-ed9d-5d3d-818d-a13036351c4a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.92.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:42ca388b-579b-5628-927b-469b8e3a6482",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f86c268-b1fa-5e23-8035-24263f72a3a2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64081076-3049-5fe2-b66c-cb70021afff0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.92.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d155d671-e8a6-54e1-9c54-8ac79288e286",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781ebb9d-2c7d-5d37-8f7a-60c6faae5746",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e62cfe2-24a9-5670-96b3-e0dd13b6bd0c",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b4aa01-86a9-5561-890f-7556723dc9c9",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7f5eff2-3d35-578c-bedf-09b987dba2e0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31cbc8a-2165-5c99-8848-5b15ea99062a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e4850b-200f-5853-bbb9-3c0e7099363f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fede117-590a-5db2-90f9-5b68fa95a30d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfaac9a3-1617-5f49-995b-758a96162844",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d82c34-aad7-5c37-a1c9-15707ee8c50f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d7d8285-e4b7-5367-aba9-9bd779571041",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6e7c6a3-7603-5a35-8419-2ef6556d5b67",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96cfc757-16c9-5d71-9334-7399190d28eb",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f19f1bf0-3afc-56db-af01-7f19ddac4c28",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ee210b-7b7a-57b9-9046-65033b73f32d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9131d09-0f7d-5886-8769-2c8c309ec97e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c630f52-8787-5325-a24d-bbb6aa1fefd5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a3fd8b4-df13-55ee-9f04-4b2184783fa8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298cab01-c2a4-50cf-bd6b-4ad4748aedea",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8fa125-013e-5613-9377-124d4a2987fb",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22868e30-d86a-5aa7-a0f5-639664dd696c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efecdbc0-953d-5182-b1fb-ea12a1d6d613",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d0f885f-e4e4-5273-ba41-2cf13d1fe6af",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ]
}