{ "@id": "urn:uuid:537bf829-ff8a-491c-bc72-2b25bdd05974", "role": "Document Creator", "author": "https://tuxcare.com", "version": 21, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-31T13:56:37.007324+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2014-0193 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2014-0193" }, "action_statement": "Vulnerability CVE-2014-0193 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-16869 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-16869" }, "action_statement": "Vulnerability CVE-2019-16869 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T03:28:09.355486+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-21290 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21290" }, "action_statement": "Vulnerability CVE-2021-21290 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21295 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21295" }, "action_statement": "Vulnerability CVE-2021-21295 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21409" }, "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-37136" }, "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-37137" }, "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T08:51:37.191068+00:00", "status_notes": "Vulnerability CVE-2022-41881 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 The target version 4.1.118.Final is not affected by CVE-2022-41881. The vulnerability (unbounded TLV nesting causing stack overflow) was fixed in upstream Netty 4.1.86.Final by commit cd91cf3c99123bd1e53fd6a1de0e3d1922f05bb2. Since 4.1.118.Final > 4.1.86.Final, the fix was already present in the upstream release when TuxCare onboarded it. The complete defense (MAX_NESTING_LEVEL=128 limit with d...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-41881" }, "impact_statement": "not_affected \u2014 The target version 4.1.118.Final is not affected by CVE-2022-41881. The vulnerability (unbounded TLV nesting causing stack overflow) was fixed in upstream Netty 4.1.86.Final by commit cd91cf3c99123bd1e53fd6a1de0e3d1922f05bb2. Since 4.1.118.Final > 4.1.86.Final, the fix was already present in the upstream release when TuxCare onboarded it. The complete defense (MAX_NESTING_LEVEL=128 limit with d..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T12:23:14.152770+00:00", "status_notes": "Vulnerability CVE-2023-34462 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 The target Netty 4.1.118.Final is NOT AFFECTED by CVE-2023-34462. The vulnerability (unbounded ClientHello allocation up to 16MB leading to DoS) does not exist because the upstream Netty project already included the fix in version 4.1.118.Final. The fix was authored by Norman Maurer (norman_maurer@apple.com) in commit 535da17e45 and shipped with the upstream release that TuxCare onboarded. The ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-34462" }, "impact_statement": "not_affected \u2014 The target Netty 4.1.118.Final is NOT AFFECTED by CVE-2023-34462. The vulnerability (unbounded ClientHello allocation up to 16MB leading to DoS) does not exist because the upstream Netty project already included the fix in version 4.1.118.Final. The fix was authored by Norman Maurer (norman_maurer@apple.com) in commit 535da17e45 and shipped with the upstream release that TuxCare onboarded. The ..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-all 4.1.118.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T13:56:37.007324+00:00", "status_notes": "Vulnerability CVE-2024-29025 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 The target repository io.netty:netty-parent:4.1.118.Final-tuxcare.1 is NOT affected by CVE-2024-29025. The vulnerability (unbounded memory accumulation in HttpPostRequestDecoder via unlimited fields in bodyListHttpData list and unlimited bytes in undecodedChunk buffer) has been fixed by the upstream vendor. The fix, authored by norman_maurer@apple.com in commit 0d0c6ed782, was already present i...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-29025" }, "impact_statement": "not_affected \u2014 The target repository io.netty:netty-parent:4.1.118.Final-tuxcare.1 is NOT affected by CVE-2024-29025. The vulnerability (unbounded memory accumulation in HttpPostRequestDecoder via unlimited fields in bodyListHttpData list and unlimited bytes in undecodedChunk buffer) has been fixed by the upstream vendor. The fix, authored by norman_maurer@apple.com in commit 0d0c6ed782, was already present i..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:22:00.076023+00:00", "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 CVE-2024-47535 is NOT present in Netty 4.1.118.Final. The vulnerability (unbounded file reading leading to OOM on Windows when attacker creates large files at C:\\etc\\os-release or C:\\usr\\lib\\os-release) was fixed by the upstream vendor in commit fbf7a704a82e before the 4.1.118.Final release. The fix introduces BoundedInputStream to limit file reads during startup (default 8KB, 1MB for resolv.co...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-47535" }, "impact_statement": "not_affected \u2014 CVE-2024-47535 is NOT present in Netty 4.1.118.Final. The vulnerability (unbounded file reading leading to OOM on Windows when attacker creates large files at C:\\etc\\os-release or C:\\usr\\lib\\os-release) was fixed by the upstream vendor in commit fbf7a704a82e before the 4.1.118.Final release. The fix introduces BoundedInputStream to limit file reads during startup (default 8KB, 1MB for resolv.co..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:36:00.141938+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 The target repository (Netty 4.1.118.Final-tuxcare.1) is not affected by CVE-2025-25193. The vulnerability was a bug in BoundedInputStream where null-bytes (0x00) were not counted toward the input limit because the code checked `b > 0` instead of `b != -1`. This could cause memory exhaustion when reading files containing null-bytes. The fix was already present in the upstream Netty 4.1.118.Fina...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 The target repository (Netty 4.1.118.Final-tuxcare.1) is not affected by CVE-2025-25193. The vulnerability was a bug in BoundedInputStream where null-bytes (0x00) were not counted toward the input limit because the code checked `b > 0` instead of `b != -1`. This could cause memory exhaustion when reading files containing null-bytes. The fix was already present in the upstream Netty 4.1.118.Fina..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2025-55163 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-55163" }, "action_statement": "Vulnerability CVE-2025-55163 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2025-58056 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-58056" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2025-58057 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-58057" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2025-59419 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-59419" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2025-67735 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-67735" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-33871 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-33871" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42577 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42577" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42578 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42578" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42579 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42579" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42580 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42580" }, "action_statement": "Vulnerability CVE-2026-42580 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42585 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42585" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42586" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44248 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44248" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44249" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44250 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44250" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44891" }, "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44893" }, "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45536" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-45673 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45673" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-45674 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45674" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-46340 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-46340" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-47244" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-47691" }, "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-48006" }, "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.118.Final-tuxcare.1 of io.netty:netty-all. not_affected \u2014 Version 4.1.118.Final is not affected by CVE-2026-48043. The vulnerable code pattern does not exist in this version due to a different architectural implementation. While the upstream fix (commit db6138b168, June 2026) addresses a resource leak in versions using an anonymous ChannelInboundHandlerAdapter pattern, version 4.1.118.Final (released February 2025) uses a for-loop based architecture w...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "not_affected \u2014 Version 4.1.118.Final is not affected by CVE-2026-48043. The vulnerable code pattern does not exist in this version due to a different architectural implementation. While the upstream fix (commit db6138b168, June 2026) addresses a resource leak in versions using an anonymous ChannelInboundHandlerAdapter pattern, version 4.1.118.Final (released February 2025) uses a for-loop based architecture w..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-48059" }, "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-55833 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55833" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55851" }, "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56817 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56817" }, "action_statement": "Vulnerability CVE-2026-56817 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56818 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56818" }, "action_statement": "Vulnerability CVE-2026-56818 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56820 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56820" }, "action_statement": "Vulnerability CVE-2026-56820 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56821 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56821" }, "action_statement": "Vulnerability CVE-2026-56821 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-56822 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56822" }, "action_statement": "Vulnerability CVE-2026-56822 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59902" }, "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59919" }, "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59920" }, "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-73507" }, "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-73508" }, "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-75595 is fixed in version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-75595" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" }, "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T13:38:00.476789+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" }, "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.118.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:21:49.480044+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.118.Final-tuxcare.1 of io.netty:netty-all." } ] }