{ "@id": "urn:uuid:a6e9009b-f508-4ea1-85d2-646941f0a926", "role": "Document Creator", "author": "https://tuxcare.com", "version": 17, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-31T11:40:00.088205+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T03:17:51.035769+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-21290 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21290" }, "action_statement": "Vulnerability CVE-2021-21290 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2021-21295 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21295" }, "action_statement": "Vulnerability CVE-2021-21295 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2021-21409 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-21409" }, "action_statement": "Vulnerability CVE-2021-21409 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-microbench 4.2.2.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:21:49.480044+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:25:00.081871+00:00", "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench. not_affected \u2014 CVE-2024-47535 describes unbounded file reading of /etc/os-release and /usr/lib/os-release that can cause OutOfMemoryError when an attacker places a >1GB file at these paths (particularly on Windows). The target repository at version 4.2.2.Final already contains the fix: BoundedInputStream wrapper is applied to all relevant file reads in PlatformDependent.java, NetUtil.java, and ResolvConf.java...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-47535" }, "impact_statement": "not_affected \u2014 CVE-2024-47535 describes unbounded file reading of /etc/os-release and /usr/lib/os-release that can cause OutOfMemoryError when an attacker places a >1GB file at these paths (particularly on Windows). The target repository at version 4.2.2.Final already contains the fix: BoundedInputStream wrapper is applied to all relevant file reads in PlatformDependent.java, NetUtil.java, and ResolvConf.java..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:40:00.088205+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench. not_affected \u2014 CVE-2025-25193 describes a DoS vulnerability where BoundedInputStream failed to count null bytes (0x00) against the configured input limit, allowing attackers to bypass protections by creating large files containing only null bytes. The vulnerability was present when the byte-counting condition was `if (b > 0)`, which excluded zero-value bytes. The upstream fix changed this to `if (b != -1)` to...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 CVE-2025-25193 describes a DoS vulnerability where BoundedInputStream failed to count null bytes (0x00) against the configured input limit, allowing attackers to bypass protections by creating large files containing only null bytes. The vulnerability was present when the byte-counting condition was `if (b > 0)`, which excluded zero-value bytes. The upstream fix changed this to `if (b != -1)` to..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2025-55163 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-55163" }, "action_statement": "Vulnerability CVE-2025-55163 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2025-58056 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-58056" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2025-58057 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-58057" }, "action_statement": "Vulnerability CVE-2025-58057 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-41417 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-41417" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42577 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42577" }, "action_statement": "Vulnerability CVE-2026-42577 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42580 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42580" }, "action_statement": "Vulnerability CVE-2026-42580 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42581 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42581" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42586 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42586" }, "action_statement": "Vulnerability CVE-2026-42586 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-44248 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44248" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-44249 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44249" }, "action_statement": "Vulnerability CVE-2026-44249 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-44250 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44250" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-44891 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-44891" }, "action_statement": "Vulnerability CVE-2026-44891 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-45416 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-45416" }, "action_statement": "Vulnerability CVE-2026-45416 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-45536" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-47244" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-48006 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-48006" }, "action_statement": "Vulnerability CVE-2026-48006 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench. not_affected \u2014 Version 4.2.2.Final is not affected by CVE-2026-48043. The vulnerable code pattern (ChannelInboundHandlerAdapter with unprotected buf.release()) described in the CVE never existed in this version. The target uses a different architecture (onDataRead method) that has had proper exception handling (try-finally protecting buf.release()) since upstream commit 6aa5f76d42 in June 2016, nearly 10 year...", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "not_affected \u2014 Version 4.2.2.Final is not affected by CVE-2026-48043. The vulnerable code pattern (ChannelInboundHandlerAdapter with unprotected buf.release()) described in the CVE never existed in this version. The target uses a different architecture (onDataRead method) that has had proper exception handling (try-finally protecting buf.release()) since upstream commit 6aa5f76d42 in June 2016, nearly 10 year..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-50560 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-50560" }, "action_statement": "Vulnerability CVE-2026-50560 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-56818 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56818" }, "action_statement": "Vulnerability CVE-2026-56818 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59920 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59920" }, "action_statement": "Vulnerability CVE-2026-59920 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-27T08:23:08.977637+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-microbench@4.2.2.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-microbench." } ] }