{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6abbe14e-7163-56cd-90b0-9966beb1e983",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.115.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:16713d19-033e-5d97-ae7c-bb7bd1f6c966",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9ec378d-40f1-59c7-a39d-77f4fd227961",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d64ef4-27ee-5e52-bbb8-a794894d0740",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:159b54a6-d200-5d4f-8d4b-27c73d744887",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e69eafa5-6bac-5f67-9299-e122d08d71f9",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65f1f3cf-6f60-58aa-8c35-a6c29215d2e7",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a9631fa-a6cf-5a43-8d1f-a98d808ad66e",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cf6c081-802d-573f-8c39-c198fbfd599c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed0896af-78d0-5c0e-8a8d-325a9b6606c3",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.115.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.115.Final-tuxcare.4"
    }
  ]
}