{
  "@id": "urn:uuid:a203d328-c613-4895-a59f-96a8a68c92b9",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 19,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T13:57:40.878166+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2014-3488"
      },
      "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2016-4970"
      },
      "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2019-20444"
      },
      "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2019-20445"
      },
      "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2020-11612"
      },
      "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T03:28:09.355486+00:00",
      "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2020-7238"
      },
      "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2021-21290 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-21290"
      },
      "action_statement": "Vulnerability CVE-2021-21290 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:49:59.024011+00:00",
      "status_notes": "Vulnerability CVE-2021-21295 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-21295"
      },
      "action_statement": "Vulnerability CVE-2021-21295 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:49:59.024011+00:00",
      "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-21409"
      },
      "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      },
      "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2021-43797"
      },
      "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:37:14.382670+00:00",
      "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2022-24823"
      },
      "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T01:45:14.642108+00:00",
      "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2022-41915"
      },
      "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-31T12:19:00.101475+00:00",
      "status_notes": "Vulnerability CVE-2023-34462 does not affect version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2. not_affected \u2014 CVE-2023-34462 does not affect this version. The vulnerability allowed SniHandler to allocate up to 16MB of heap per connection without limit. The fix (upstream commit 535da17e45 by Norman Maurer) adds maxClientHelloLength validation with a safe 64KB default, rejecting oversized ClientHello messages. This fix was already present in upstream Netty 4.1.112.Final when TuxCare onboarded it (first T...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-34462"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-34462 does not affect this version. The vulnerability allowed SniHandler to allocate up to 16MB of heap per connection without limit. The fix (upstream commit 535da17e45 by Norman Maurer) adds maxClientHelloLength validation with a safe 64KB default, rejecting oversized ClientHello messages. This fix was already present in upstream Netty 4.1.112.Final when TuxCare onboarded it (first T..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-http2 4.1.112.Final-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2023-4586"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-31T13:57:40.878166+00:00",
      "status_notes": "Vulnerability CVE-2024-29025 does not affect version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2. not_affected \u2014 CVE-2024-29025 (memory exhaustion via unbounded form field accumulation) is NOT present in target version 4.1.112.Final-tuxcare.6. The upstream fix (commit 0d0c6ed782 by norman_maurer@apple.com, 2024-03-21) was already included in upstream Netty 4.1.112.Final before TuxCare onboarded it (commit 66c2a8ccaa). The fix enforces hard limits on field count (default 128) and buffered bytes per field (...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-29025"
      },
      "impact_statement": "not_affected \u2014 CVE-2024-29025 (memory exhaustion via unbounded form field accumulation) is NOT present in target version 4.1.112.Final-tuxcare.6. The upstream fix (commit 0d0c6ed782 by norman_maurer@apple.com, 2024-03-21) was already included in upstream Netty 4.1.112.Final before TuxCare onboarded it (commit 66c2a8ccaa). The fix enforces hard limits on field count (default 128) and buffered bytes per field (..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "action_statement": "Vulnerability CVE-2024-47535 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2025-24970"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      },
      "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-55163 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2025-55163"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-58056 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2025-58056"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2025-67735"
      },
      "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-33870"
      },
      "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33871 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2026-33871"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-41417"
      },
      "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42580 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-42580"
      },
      "action_statement": "Vulnerability CVE-2026-42580 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-42581"
      },
      "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42584 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-42584"
      },
      "action_statement": "Vulnerability CVE-2026-42584 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-42585"
      },
      "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-42587"
      },
      "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44249 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-44249"
      },
      "action_statement": "Vulnerability CVE-2026-44249 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-47244"
      },
      "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48043 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-48043"
      },
      "action_statement": "Vulnerability CVE-2026-48043 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50010 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-50010"
      },
      "action_statement": "Vulnerability CVE-2026-50010 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-50020"
      },
      "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50560 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-50560"
      },
      "action_statement": "Vulnerability CVE-2026-50560 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-55831"
      },
      "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-55833"
      },
      "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-56745"
      },
      "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-56746"
      },
      "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-56819"
      },
      "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-59898"
      },
      "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-59899"
      },
      "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-59900"
      },
      "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2026-59903"
      },
      "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-59921"
      },
      "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2026-75595"
      },
      "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "CVE-2026-75596"
      },
      "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2, and is fixed in 4.1.112.Final-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.112.Final-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T22:21:49.480044+00:00",
      "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2.",
      "vulnerability": {
        "name": "GHSA-xpw8-rcwv-8f8p"
      },
      "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-testsuite-http2."
    }
  ]
}