{ "@id": "urn:uuid:456669f0-7efd-49c1-b075-30714513b787", "role": "Document Creator", "author": "https://tuxcare.com", "version": 14, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T15:30:49.741847+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-28T23:00:15.311032+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-29T03:28:09.355486+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2021-21290 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21290" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:22:08.408592+00:00", "status_notes": "Vulnerability CVE-2021-21295 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21295" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2021-21409 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21409" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2021-37136 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-37136" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2021-37137 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-37137" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-26T23:12:13.809981+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:22:08.408592+00:00", "status_notes": "Vulnerability CVE-2022-24823 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2022-24823" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-26T23:12:13.809981+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2023-44487 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2023-44487" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-microbench 4.1.48.Final-tuxcare.4.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-26T23:12:13.809981+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-26T23:12:13.809981+00:00", "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5.", "vulnerability": { "name": "CVE-2024-47535" }, "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench, and is fixed in 4.1.48.Final-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-24970" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench. not_affected \u2014 Version 4.1.48.Final does not contain the BoundedInputStream class that is the subject of CVE-2025-25193. The vulnerability concerns a null-byte counting bug in BoundedInputStream where the check `if (b <= 0)` fails to count null-bytes (b == 0) toward the read limit, allowing attackers to bypass the protection. BoundedInputStream was introduced as part of CVE-2024-47535 fixes and backported to ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 Version 4.1.48.Final does not contain the BoundedInputStream class that is the subject of CVE-2025-25193. The vulnerability concerns a null-byte counting bug in BoundedInputStream where the check `if (b <= 0)` fails to count null-bytes (b == 0) toward the read limit, allowing attackers to bypass the protection. BoundedInputStream was introduced as part of CVE-2024-47535 fixes and backported to ..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:23:00.134646+00:00", "status_notes": "Vulnerability CVE-2025-55163 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-55163" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:23:00.134646+00:00", "status_notes": "Vulnerability CVE-2025-58056 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-58056" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-58057" }, "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2025-67735 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-67735" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42577 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42577" }, "action_statement": "Vulnerability CVE-2026-42577 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42580 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42580" }, "action_statement": "Vulnerability CVE-2026-42580 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42583" }, "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42584" }, "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42586" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-44249 does not affect version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench. not_affected \u2014 CVE-2026-44249 describes a vulnerability in the IpSubnetFilterRule.compareTo() method introduced by a binary search optimization in September 2020. The target version 4.1.48.Final predates this optimization and does not contain the vulnerable code path. The target uses a simpler matches() method that correctly applies the subnet mask in bitwise AND operations, preventing the bypass described in...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-44249" }, "impact_statement": "not_affected \u2014 CVE-2026-44249 describes a vulnerability in the IpSubnetFilterRule.compareTo() method introduced by a binary search optimization in September 2020. The target version 4.1.48.Final predates this optimization and does not contain the vulnerable code path. The target uses a simpler matches() method that correctly applies the subnet mask in bitwise AND operations, preventing the bypass described in..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44250" }, "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-44890 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44890" }, "action_statement": "Vulnerability CVE-2026-44890 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-45416" }, "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-45536 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-45536" }, "action_statement": "Vulnerability CVE-2026-45536 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-47244" }, "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-48006" }, "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench. not_affected \u2014 The target version (4.1.48.Final-tuxcare.1) is NOT AFFECTED by CVE-2026-48043. The vulnerability exists in newer Netty versions (4.1.115.Final+) that use an anonymous ChannelInboundHandlerAdapter architecture without try-finally protection. The target uses a different, older architecture where decompression is handled directly in the onDataRead() method with existing try-finally protection (lin...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "not_affected \u2014 The target version (4.1.48.Final-tuxcare.1) is NOT AFFECTED by CVE-2026-48043. The vulnerability exists in newer Netty versions (4.1.115.Final+) that use an anonymous ChannelInboundHandlerAdapter architecture without try-finally protection. The target uses a different, older architecture where decompression is handled directly in the onDataRead() method with existing try-finally protection (lin..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:23:00.134646+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-56818 does not affect version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench. not_affected \u2014 CVE-2026-56818 describes inconsistent error-handling behavior between two configurable aggregation-limit parameters (maxElements and maxNestedArrayDepth) in RedisArrayAggregator: the maxNestedArrayDepth branch calls releaseAndClearDepths() before throwing, while the maxElements branch does not. Target version 4.1.48.Final predates the introduction of both parameters by 87 versions\u2014they were add...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-56818" }, "impact_statement": "not_affected \u2014 CVE-2026-56818 describes inconsistent error-handling behavior between two configurable aggregation-limit parameters (maxElements and maxNestedArrayDepth) in RedisArrayAggregator: the maxNestedArrayDepth branch calls releaseAndClearDepths() before throwing, while the maxElements branch does not. Target version 4.1.48.Final predates the introduction of both parameters by 87 versions\u2014they were add..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:23:00.134646+00:00", "status_notes": "Vulnerability CVE-2026-56819 is fixed in version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56819" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" }, "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" }, "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.1.48.Final-tuxcare.4" } } ], "timestamp": "2026-10-13T12:17:06.954676+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.48.Final-tuxcare.4 of io.netty:netty-microbench." } ] }