{ "@id": "urn:uuid:4fc3bf02-80f9-4fc9-8725-32704b0aae55", "role": "Document Creator", "author": "https://tuxcare.com", "version": 12, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T15:30:49.741847+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T03:28:09.355486+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-21290 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-21290" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-21295 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-21295" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-21409" }, "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-37136 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-37136" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-37137 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-37137" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-24823 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2022-24823" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-34462 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2023-34462" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2, and is fixed in 4.1.58.Final-tuxcare.2.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2, and is fixed in 4.1.58.Final-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.58.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2, and is fixed in 4.1.58.Final-tuxcare.2.", "vulnerability": { "name": "CVE-2024-47535" }, "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2, and is fixed in 4.1.58.Final-tuxcare.2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-24970" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-25193" }, "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55163 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-55163" }, "action_statement": "Vulnerability CVE-2025-55163 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-58056" }, "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-58057" }, "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42577 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42577" }, "action_statement": "Vulnerability CVE-2026-42577 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42580 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42580" }, "action_statement": "Vulnerability CVE-2026-42580 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42583" }, "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42584" }, "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-44249 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-44249" }, "action_statement": "Vulnerability CVE-2026-44249 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-45416" }, "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-47244" }, "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2. already_fixed \u2014 Target version 4.1.58.Final already contains exception-safe buffer cleanup via finally block (lines 132-134), providing the same protection that the upstream patch adds to newer versions. The vulnerability was introduced in versions AFTER 4.1.58 through architectural refactoring that removed this protection. Version 4.1.58 never had this vulnerability.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "already_fixed \u2014 Target version 4.1.58.Final already contains exception-safe buffer cleanup via finally block (lines 132-134), providing the same protection that the upstream patch adds to newer versions. The vulnerability was introduced in versions AFTER 4.1.58 through architectural refactoring that removed this protection. Version 4.1.58 never had this vulnerability." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50010 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-50010" }, "action_statement": "Vulnerability CVE-2026-50010 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-50560 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-50560" }, "action_statement": "Vulnerability CVE-2026-50560 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" }, "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" }, "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.58.Final-tuxcare.1 of io.netty:netty-codec-http2." } ] }