{
  "@id": "urn:uuid:45a86d3c-a9db-46ce-9e22-6ed555f52827",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 11,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      },
      "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 is fixed in version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      },
      "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-42586"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44250"
      },
      "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-44890"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-48006"
      },
      "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-50011"
      },
      "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 Target version 4.1.72.Final predates the security hardening features that CVE-2026-56818 concerns. The CVE describes incomplete resource cleanup in the maxElements limit check within RedisArrayAggregator. However, the maxElements and maxNestedArrayDepth security limits were not introduced until approximately version 4.1.135.Final (63 minor versions later, via upstream PRs #16858 and #16882). Th...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-56818"
      },
      "impact_statement": "not_affected \u2014 Target version 4.1.72.Final predates the security hardening features that CVE-2026-56818 concerns. The CVE describes incomplete resource cleanup in the maxElements limit check within RedisArrayAggregator. However, the maxElements and maxNestedArrayDepth security limits were not introduced until approximately version 4.1.135.Final (63 minor versions later, via upstream PRs #16858 and #16882). Th..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.72.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T13:38:00.476789+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.72.Final-tuxcare.1 of io.netty:netty-codec-redis."
    }
  ]
}