{
  "@id": "urn:uuid:6a6affc8-3cc6-4d5e-9fa8-7655c28e81ba",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 13,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      },
      "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2022-41881 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2022-41881"
      },
      "action_statement": "Vulnerability CVE-2022-41881 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy. not_affected \u2014 CVE-2025-25193 describes a bug in the BoundedInputStream class where null bytes (0x00) are not counted toward the configured input limit. The BoundedInputStream class was introduced in Netty version 4.1.115.Final (November 2024) to address CVE-2024-47535. The target version 4.1.68.Final predates this class entirely\u2014BoundedInputStream.java does not exist in the repository at this version. Since ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "impact_statement": "not_affected \u2014 CVE-2025-25193 describes a bug in the BoundedInputStream class where null bytes (0x00) are not counted toward the configured input limit. The BoundedInputStream class was introduced in Netty version 4.1.115.Final (November 2024) to address CVE-2024-47535. The target version 4.1.68.Final predates this class entirely\u2014BoundedInputStream.java does not exist in the repository at this version. Since ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-42577 is fixed in version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-42577"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-44893 is fixed in version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-44893"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-48059 is fixed in version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-48059"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-55851"
      },
      "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.68.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-59919"
      },
      "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.68.Final-tuxcare.1 of io.netty:netty-codec-haproxy."
    }
  ]
}