{ "@id": "urn:uuid:3aa66ca3-726f-407c-b7ee-e53aa1aaebbb", "role": "Document Creator", "author": "https://tuxcare.com", "version": 21, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-31T11:37:00.140949+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2014-0193 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2014-0193" }, "action_statement": "Vulnerability CVE-2014-0193 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-16869 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-16869" }, "action_statement": "Vulnerability CVE-2019-16869 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T03:17:51.035769+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-21290 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21290" }, "action_statement": "Vulnerability CVE-2021-21290 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21295 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21295" }, "action_statement": "Vulnerability CVE-2021-21295 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-21409" }, "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-37136" }, "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-37137" }, "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-31T08:46:00.114957+00:00", "status_notes": "Vulnerability CVE-2022-41881 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. not_affected \u2014 CVE-2022-41881 is NOT present in target version 4.1.130.Final. The vulnerability (StackOverflowError from unbounded recursion when parsing nested HAProxy TLVs) was fixed by upstream Netty in version 4.1.86.Final (commit cd91cf3c99 by Norman Maurer). This fix was already included in the upstream 4.1.130.Final release that TuxCare onboarded, so the vulnerable pattern does not exist in the target....", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-41881" }, "impact_statement": "not_affected \u2014 CVE-2022-41881 is NOT present in target version 4.1.130.Final. The vulnerability (StackOverflowError from unbounded recursion when parsing nested HAProxy TLVs) was fixed by upstream Netty in version 4.1.86.Final (commit cd91cf3c99 by Norman Maurer). This fix was already included in the upstream 4.1.130.Final release that TuxCare onboarded, so the vulnerable pattern does not exist in the target...." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-all 4.1.130.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:21:49.480044+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-31T11:24:00.148485+00:00", "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. not_affected \u2014 CVE-2024-47535 (DoS via unbounded file reads during Netty startup on Windows) is NOT PRESENT in this target. The upstream fix (BoundedInputStream wrapper limiting file reads to 8KB-1MB) was authored by Norman Maurer and shipped in Netty 4.1.130.Final before TuxCare onboarded the version. All three vulnerable file-reading code paths (PlatformDependent.java reading /etc/os-release, NetUtil.java r...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-47535" }, "impact_statement": "not_affected \u2014 CVE-2024-47535 (DoS via unbounded file reads during Netty startup on Windows) is NOT PRESENT in this target. The upstream fix (BoundedInputStream wrapper limiting file reads to 8KB-1MB) was authored by Norman Maurer and shipped in Netty 4.1.130.Final before TuxCare onboarded the version. All three vulnerable file-reading code paths (PlatformDependent.java reading /etc/os-release, NetUtil.java r..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-31T11:37:00.140949+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. not_affected \u2014 The target Netty 4.1.130.Final-tuxcare.4 is NOT AFFECTED by CVE-2025-25193. The vulnerability (null-bytes not counted against input limit in BoundedInputStream) was fixed in upstream commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386, which shipped in Netty 4.1.118.Final. The target version 4.1.130.Final inherited this fix from upstream before TuxCare onboarded it (commit c7c85999). The current co...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 The target Netty 4.1.130.Final-tuxcare.4 is NOT AFFECTED by CVE-2025-25193. The vulnerability (null-bytes not counted against input limit in BoundedInputStream) was fixed in upstream commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386, which shipped in Netty 4.1.118.Final. The target version 4.1.130.Final inherited this fix from upstream before TuxCare onboarded it (commit c7c85999). The current co..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-55163" }, "impact_statement": "already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-58056" }, "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-31T11:14:00.209703+00:00", "status_notes": "Vulnerability CVE-2025-58057 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. not_affected \u2014 CVE-2025-58057 describes a decompression bomb vulnerability in BrotliDecoder where unbounded buffer accumulation leads to OOM. The target repository (Netty 4.1.130.Final) is not affected because the vulnerable pattern was already fixed by upstream in commit 34894ac73b02efefeacd9c0972780b32dc3de04f, which shipped with the 4.1.130.Final release that TuxCare onboarded. The fix changes BrotliDecode...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-58057" }, "impact_statement": "not_affected \u2014 CVE-2025-58057 describes a decompression bomb vulnerability in BrotliDecoder where unbounded buffer accumulation leads to OOM. The target repository (Netty 4.1.130.Final) is not affected because the vulnerable pattern was already fixed by upstream in commit 34894ac73b02efefeacd9c0972780b32dc3de04f, which shipped with the 4.1.130.Final release that TuxCare onboarded. The fix changes BrotliDecode..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-31T08:41:00.306335+00:00", "status_notes": "Vulnerability CVE-2025-59419 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. not_affected \u2014 The target repository (Netty 4.1.130.Final-tuxcare.4) is not affected by CVE-2025-59419 (SMTP Command Injection via CRLF injection). The vulnerability was fixed by the upstream Netty project in commit 2b3fddd3339cde1601f622b9ce5e54c39f24c3f9, which was already present in the 4.1.130.Final release that TuxCare onboarded. The fix adds validation in SmtpUtils.validateSMTPParameter() that checks al...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-59419" }, "impact_statement": "not_affected \u2014 The target repository (Netty 4.1.130.Final-tuxcare.4) is not affected by CVE-2025-59419 (SMTP Command Injection via CRLF injection). The vulnerability was fixed by the upstream Netty project in commit 2b3fddd3339cde1601f622b9ce5e54c39f24c3f9, which was already present in the 4.1.130.Final release that TuxCare onboarded. The fix adds validation in SmtpUtils.validateSMTPParameter() that checks al..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:21:49.480044+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-33871" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-29T02:29:31.477851+00:00", "status_notes": "Vulnerability CVE-2026-42577 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42577" }, "action_statement": "Vulnerability CVE-2026-42577 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42578" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42579" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42580" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42581" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42584" }, "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42586" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-42587" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-44248" }, "action_statement": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44249" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44250" }, "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-44891" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-44893" }, "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-45416" }, "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2026-45536" }, "action_statement": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all, and is fixed in 4.1.130.Final-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45673" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-45674" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-46340" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-47244" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-47691" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-48006" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-48043" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-48059" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-50011" }, "impact_statement": "Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50020" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55831" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55833" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-55851" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56745" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56746" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56817" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56818" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56819" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56820" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56821" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-56822" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59898" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59899" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59900" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59901" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59902" }, "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59919" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59920" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-59921" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-73507" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-73508" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "identifiers": { "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." } ] }