{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c86d6ba-9fdf-5934-b026-2bfcb87da7e5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-sctp",
      "version": "4.1.92.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ca6ad645-969d-508c-9ff5-822ec6f31538",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9326af-b9ec-559e-8a7c-4679441a6ce9",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f20c9a6b-2c74-50b7-87a7-96619987ee51",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-sctp 4.1.92.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d58d7137-3967-52b4-bdd3-bfd49ca22789",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cf603ff-c106-5ad9-b467-ca8e4de019d2",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d248e571-3eb7-5c24-a233-552aaec72e0f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dd85986-e381-50ac-9f70-65277f7e9e83",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e978559-b171-5bb8-9dce-1a8bae363d41",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a63ab450-3744-5f8f-ada7-01771275f8f8",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5da0829-79bc-53a8-92cc-03ee4911651f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b056be45-8b07-5d36-b2b3-6e3affeb86b6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39cd6c11-0c75-519f-ab43-d7077aaf2fab",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb1bb3f0-9cc3-5c8e-920b-96aeaf4de9a5",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90542467-90d5-51b9-b974-e22235732fdd",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:927a399f-0b07-53f5-94a8-74e5e41f51e1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80c68ba8-c002-5239-a12b-e677638dc22e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ed895f7-f9e7-555d-a677-ac8d36212568",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d31cd8-88b0-5486-9a54-1cd92ca9f082",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:792abc96-bef9-5984-888f-201bd22fd1a3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c868f512-64b4-590f-885d-45fc85f4766a",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b09c883e-c7b6-5b5c-add4-beeb2844be09",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87cd3287-b143-5e23-8bad-7778cb7b4735",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f15fdc66-813c-501e-90a8-3886e8a71967",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4397608d-b944-5bb7-bb51-60dd0b256790",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85c6618c-522f-5f91-bca4-e21144de58e9",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94df9c6b-eb67-575c-a0ac-68f74aba62b5",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.92.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.3"
    }
  ]
}