{
  "@id": "urn:uuid:1ed52dda-9dbf-4d13-a607-14a114f097e9",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 17,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:40:00.088205+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2014-3488 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2014-3488"
      },
      "action_statement": "Vulnerability CVE-2014-3488 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2016-4970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2016-4970"
      },
      "action_statement": "Vulnerability CVE-2016-4970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2019-20445 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2019-20445"
      },
      "action_statement": "Vulnerability CVE-2019-20445 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T00:12:47.728703+00:00",
      "status_notes": "Vulnerability CVE-2020-11612 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2020-11612"
      },
      "action_statement": "Vulnerability CVE-2020-11612 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T03:17:51.035769+00:00",
      "status_notes": "Vulnerability CVE-2020-7238 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2020-7238"
      },
      "action_statement": "Vulnerability CVE-2020-7238 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:15:27.793370+00:00",
      "status_notes": "Vulnerability CVE-2023-34462 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2023-34462"
      },
      "action_statement": "Vulnerability CVE-2023-34462 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver-dns-classes-macos 4.2.2.Final-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2023-4586"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-31T11:25:00.081871+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos. not_affected \u2014 CVE-2024-47535 describes unbounded file reading of /etc/os-release and /usr/lib/os-release that can cause OutOfMemoryError when an attacker places a >1GB file at these paths (particularly on Windows). The target repository at version 4.2.2.Final already contains the fix: BoundedInputStream wrapper is applied to all relevant file reads in PlatformDependent.java, NetUtil.java, and ResolvConf.java...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "impact_statement": "not_affected \u2014 CVE-2024-47535 describes unbounded file reading of /etc/os-release and /usr/lib/os-release that can cause OutOfMemoryError when an attacker places a >1GB file at these paths (particularly on Windows). The target repository at version 4.2.2.Final already contains the fix: BoundedInputStream wrapper is applied to all relevant file reads in PlatformDependent.java, NetUtil.java, and ResolvConf.java..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:15:27.793370+00:00",
      "status_notes": "Vulnerability CVE-2025-24970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2025-24970"
      },
      "action_statement": "Vulnerability CVE-2025-24970 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-31T11:40:00.088205+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos. not_affected \u2014 CVE-2025-25193 describes a DoS vulnerability where BoundedInputStream failed to count null bytes (0x00) against the configured input limit, allowing attackers to bypass protections by creating large files containing only null bytes. The vulnerability was present when the byte-counting condition was `if (b > 0)`, which excluded zero-value bytes. The upstream fix changed this to `if (b != -1)` to...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "impact_statement": "not_affected \u2014 CVE-2025-25193 describes a DoS vulnerability where BoundedInputStream failed to count null bytes (0x00) against the configured input limit, allowing attackers to bypass protections by creating large files containing only null bytes. The vulnerability was present when the byte-counting condition was `if (b > 0)`, which excluded zero-value bytes. The upstream fix changed this to `if (b != -1)` to..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-42579 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-42579"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-44249 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-44249"
      },
      "action_statement": "Vulnerability CVE-2026-44249 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-45416 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "action_statement": "Vulnerability CVE-2026-45416 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-45673 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-45673"
      },
      "action_statement": "Vulnerability CVE-2026-45673 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-45674 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-45674"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-47691 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-47691"
      },
      "action_statement": "Vulnerability CVE-2026-47691 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-50010"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-73508 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-73508"
      },
      "action_statement": "Vulnerability CVE-2026-73508 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-75595 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-75595"
      },
      "action_statement": "Vulnerability CVE-2026-75595 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.2.2.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:23:08.977637+00:00",
      "status_notes": "Vulnerability CVE-2026-75596 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos.",
      "vulnerability": {
        "name": "CVE-2026-75596"
      },
      "action_statement": "Vulnerability CVE-2026-75596 affects version 4.2.2.Final-tuxcare.1 of io.netty:netty-resolver-dns-classes-macos."
    }
  ]
}