{
  "@id": "urn:uuid:e4a73022-1169-48d3-bce1-6d0dbc7f0485",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 is fixed in version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      },
      "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      },
      "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      },
      "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 Version 4.1.59.Final is not affected by CVE-2026-56818. The vulnerable code path (maxElements limit check that throws without cleanup) does not exist in this version. The maxElements feature was introduced in commit e51c64c964 (June 2026) for Netty 4.1.135.Final and 4.2.x series, five years after 4.1.59.Final was released (February 2021). The target version only has a basic Integer.MAX_VALUE ch...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 Version 4.1.59.Final is not affected by CVE-2026-56818. The vulnerable code path (maxElements limit check that throws without cleanup) does not exist in this version. The maxElements feature was introduced in commit e51c64c964 (June 2026) for Netty 4.1.135.Final and 4.2.x series, five years after 4.1.59.Final was released (February 2021). The target version only has a basic Integer.MAX_VALUE ch..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.59.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-26T16:39:37.339465+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.59.Final-tuxcare.1 of io.netty:netty-codec-redis."
    }
  ]
}