{
  "@id": "urn:uuid:7d754318-9837-43a1-9d7e-13d587d45966",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 22,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      },
      "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:37:35.866702+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation path, where retained ByteBuf references and aggregate state survive codec exceptions. The vulnerability requires the maxElements and maxNestedArrayDepth configuration features, which were introduced in commits e51c64c964 and 728c98b8ec (June 2026) and first released in version 4.1.135.Final. The target ver...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation path, where retained ByteBuf references and aggregate state survive codec exceptions. The vulnerability requires the maxElements and maxNestedArrayDepth configuration features, which were introduced in commits e51c64c964 and 728c98b8ec (June 2026) and first released in version 4.1.135.Final. The target ver..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.113.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:36:59.812668+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.113.Final-tuxcare.1 of io.netty:netty-codec-redis."
    }
  ]
}