{
  "@id": "urn:uuid:c2feb98e-825d-49c6-b414-b63110804bee",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 12,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:34:33.918851+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 is fixed in version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:34:33.918851+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      },
      "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2026-56818 describes a vulnerability in RedisArrayAggregator where the maxElements limit check fails to clean up retained state while the sibling maxNestedArrayDepth check does clean up. This inconsistent cleanup pattern was introduced when commit 728c98b8ec added maxNestedArrayDepth WITH cleanup (releaseAndClearDepths()), while the earlier maxElements check (commit e51c64c964) remained wit...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-56818 describes a vulnerability in RedisArrayAggregator where the maxElements limit check fails to clean up retained state while the sibling maxNestedArrayDepth check does clean up. This inconsistent cleanup pattern was introduced when commit 728c98b8ec added maxNestedArrayDepth WITH cleanup (releaseAndClearDepths()), while the earlier maxElements check (commit e51c64c964) remained wit..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.51.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T09:33:36.337737+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.51.Final-tuxcare.1 of io.netty:netty-codec-redis."
    }
  ]
}