{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:08f7b960-dcb4-590e-b1be-73cbbb4cb9f1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.52.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:869ce8bf-b39e-5776-8b5e-a25a0be436e8",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90b0d22d-3b39-5672-9c10-efc4609901ac",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21295 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7597c7c2-7ffe-5205-b9f3-a3f820732557",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd687ec1-d712-5503-ad01-46580729e582",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da942f7f-1aa8-5ea7-a4bc-02c26389d50b",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e18b4bf6-6754-542c-9704-a5cd01eeadb0",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:941061d6-3115-5630-a489-0d55c24ad50a",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6538d8b-3d32-508c-a81c-00e1fd3b0f2f",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9c24d42-4d25-57ff-b8cf-a91842f2653e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d76411f9-6c6d-5368-b088-d8fac291ffbc",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd82a8d4-c20f-5080-8295-3042bcb34b5a",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.52.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67db4535-c66a-5087-b2c1-b710a9ad7d01",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4265a826-6f0e-50b6-8661-b0bc14f58cb7",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af51668f-df2e-50f3-9c85-eb1e1c3cf48f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9bd6202-5e64-5fef-8c65-4373042daa29",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b7611d3-a1b5-5a4e-8853-05710ba2632e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58008f52-3da7-5744-bfad-1effe6f95fbd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62a2f7f0-1d92-568a-991c-e2003b39103b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5c4b7cb-5b88-51be-a967-3aa34336305e",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f26e252e-c477-57a3-b940-90ea29b16955",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31d54eae-0d7d-5438-8075-4af6827b3543",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3689f4a0-b332-553c-8f41-f78e9f42ce31",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:159dad8e-b710-5c37-860e-a6cebb2e316f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.52.Final-tuxcare.2"
    }
  ]
}