{
  "@id": "urn:uuid:f3b10ef6-d697-4bd4-ae74-6fc9bdb61f39",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 13,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:55:41.957093+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 is fixed in version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:55:41.957093+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 is fixed in version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-17T09:08:00.177306+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-17T09:08:00.177306+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      },
      "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      },
      "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T13:52:29.952159+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation check (throws without calling releaseAndClearDepths). The target version 4.1.42.Final does not have the maxElements feature, maxNestedArrayDepth feature, or releaseAndClearDepths method. These features were introduced in later commits (e51c64c964, 728c98b8ec, ced30adba2) after 4.1.42.Final was released. Th...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator's maxElements validation check (throws without calling releaseAndClearDepths). The target version 4.1.42.Final does not have the maxElements feature, maxNestedArrayDepth feature, or releaseAndClearDepths method. These features were introduced in later commits (e51c64c964, 728c98b8ec, ced30adba2) after 4.1.42.Final was released. Th..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.42.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-17T09:08:00.177306+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.42.Final-tuxcare.1 of io.netty:netty-codec-redis."
    }
  ]
}