{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f5b5418b-1d93-5a3d-8f0c-d526701edd8f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.115.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:961ab33a-cbcb-5e6a-a420-f836c87a2774",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39532011-0583-5ed6-8b1a-13c2b811f2b1",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:971dc86c-0694-572f-816e-f0e036a9dc98",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85b0e8bf-a124-5cdc-95cb-6c200305ab6d",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef4188c-8f1d-5a1a-9b3b-a7e7aeced7cb",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18532226-03de-52d0-8289-e800361e8873",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:413f4583-591b-5742-a453-b21309fdcd67",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0645b7c-09d4-528f-b07d-685422cb5646",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64746199-186c-5d66-815b-c014985f23eb",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96017421-f015-5e72-8631-26ab5d7c0650",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a5143b0-b2d2-551c-b45d-17c875392f6c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d67f6d2-f0ab-593a-a825-99f7d1011df0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c6cd90f-29f1-5534-a92c-7d18167ab631",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e820a1fb-6b0c-5624-85f7-a1c07b9512ee",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f69d834a-3562-5a85-88f7-f680948caaa6",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a332ad7-0d04-503c-9666-26a2f9270afd",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:676db6b8-d306-55e6-b5cc-97ad1cd16869",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0c1ad7f-6c38-5424-b4d3-2dcbe07a2957",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c20e478c-a4c3-53b7-9cff-a1d6778a4211",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fde9b68a-1f46-5a3f-920f-9416e5c33be8",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.115.Final-tuxcare.3"
    }
  ]
}