{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b4fa8ffb-22f0-54cc-b4c9-5f372cc13795",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-rxtx",
      "version": "4.1.60.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:99b42f5c-8ce5-54dd-8926-d493755c89cc",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d77203b-2b13-5091-b1f5-1ce9c296a9c1",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e3a1a1b-57e8-5c5e-8a71-b47f007d907b",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50868006-2a88-527d-add4-b570f78c7572",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35bdcd62-4056-5687-8e3e-ac7da45db5f1",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf47aa94-2959-51d2-ac90-29883b0a727d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74610e44-d2a4-5721-a448-6335bbc99f75",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71eac31a-8cac-5957-9922-0d2a573ede15",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:789d18d2-4ba2-5f62-8058-5ee6aa7b12ba",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.60.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b282fa-ff3f-5251-8269-508df7e3c7e7",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2687e793-3c9c-5157-9e4b-52963cea7a85",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df9d9fab-fd55-53b3-9ebd-b18e0937d448",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:001f7724-904b-5d2f-9cc4-16856076b4dc",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04f65b8c-8f88-57bd-a856-1185ede6d5d7",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a4e9bed-5b65-5296-aebe-05062d12dd55",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47980c2b-7140-5978-8177-1cced885ddca",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f012a65-c720-5646-bb5d-aa99a3528e93",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c871e2a-86f2-5e08-82f5-ff99afde3217",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba129f21-cbd0-57ec-9a60-5afc8bfa7105",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:291d7c93-e6cd-58cf-b3de-8597fa9b2609",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e220c4bd-9b74-5ebd-99cd-8c8580323e4a",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963629ea-db39-5d2a-b51b-a35ebb072099",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d43184d-bd99-5813-aeaa-554b7655c00a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb0675f7-b904-5596-997b-7293cdfee534",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb31f36e-a32d-514e-a6ad-3e260b00f939",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc3e4517-327d-5ce8-9143-02c0aac71b92",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b728e79d-7a69-5d6f-b6ef-4cd35a6c4670",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d26b69-1787-530e-b540-4b1591b7fb14",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c40bd3-bd7f-5589-9d22-b7d41cff2e48",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0af2615-5601-59d8-bf54-9108276d98ec",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e60a325-deba-533f-8463-0801f2a3628b",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:060af44f-1159-56f6-b3dd-4439413a733e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.60.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.60.Final-tuxcare.2"
    }
  ]
}