{ "@id": "urn:uuid:eafcfa72-3d0a-4d53-b419-997a24b10a8f", "role": "Document Creator", "author": "https://tuxcare.com", "version": 20, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-31T11:39:00.133278+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T03:17:51.035769+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-21290 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-21290" }, "action_statement": "Vulnerability CVE-2021-21290 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21295 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-21295" }, "action_statement": "Vulnerability CVE-2021-21295 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-21409 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-21409" }, "action_statement": "Vulnerability CVE-2021-21409 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-37136" }, "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-37137" }, "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-http2 4.1.128.Final-tuxcare.2.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:21:49.480044+00:00", "status_notes": "Vulnerability CVE-2024-29025 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2024-29025" }, "action_statement": "Vulnerability CVE-2024-29025 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-31T11:25:00.081871+00:00", "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2. not_affected \u2014 The target repository (Netty 4.1.128.Final) is NOT AFFECTED by CVE-2024-47535. The vulnerability\u2014unbounded file reads causing OutOfMemoryError\u2014was fixed by the upstream Netty project via commit fbf7a704a82e7449b48bd0bbb679f5661c6d61a3 (dated 2024-11-12) which introduced BoundedInputStream to limit file read sizes. This fix was already present in the upstream 4.1.128.Final release when TuxCare o...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-47535" }, "impact_statement": "not_affected \u2014 The target repository (Netty 4.1.128.Final) is NOT AFFECTED by CVE-2024-47535. The vulnerability\u2014unbounded file reads causing OutOfMemoryError\u2014was fixed by the upstream Netty project via commit fbf7a704a82e7449b48bd0bbb679f5661c6d61a3 (dated 2024-11-12) which introduced BoundedInputStream to limit file read sizes. This fix was already present in the upstream 4.1.128.Final release when TuxCare o..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-31T11:39:00.133278+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2. not_affected \u2014 CVE-2025-25193 affects BoundedInputStream's handling of null-bytes (0x00) which were not counted toward the input limit due to checking `if (b > 0)` instead of `if (b != -1)`. This allowed attackers to cause DoS via unbounded memory consumption. The target repository (Netty 4.1.128.Final) is NOT AFFECTED because the fix was already present in the upstream release 4.1.128.Final before TuxCare on...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 CVE-2025-25193 affects BoundedInputStream's handling of null-bytes (0x00) which were not counted toward the input limit due to checking `if (b > 0)` instead of `if (b != -1)`. This allowed attackers to cause DoS via unbounded memory consumption. The target repository (Netty 4.1.128.Final) is NOT AFFECTED because the fix was already present in the upstream release 4.1.128.Final before TuxCare on..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2025-55163 does not affect version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2. CVE-2025-55163 (MadeYouReset) fix is present in Netty 4.1.128.Final. The vulnerability allows attackers to flood the server with RST_STREAM frames by sending malformed HTTP/2 control frames. The fix consists of two parts: (1) routing all RST_STREAM writes through the encoder chain via encoder().writeRstStream(), and (2) introducing Http2MaxRstFrameLimitEncoder that tracks and rate-limits outgoing RST frames, closing the connection when the threshold is exceeded. Both components are present and enabled by default for servers (200 RST frames per 30-second window). The fix was authored by upstream Netty maintainer Norman Maurer (norman_maurer@apple.com) in commit 009bd17b38 (August 2025) and was included in the upstream 4.1.128.Final release (October 2025), which TuxCare onboarded on October 1, 2026. This is a vendor-authored fix, not a TuxCare backport.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-55163" }, "impact_statement": "CVE-2025-55163 (MadeYouReset) fix is present in Netty 4.1.128.Final. The vulnerability allows attackers to flood the server with RST_STREAM frames by sending malformed HTTP/2 control frames. The fix consists of two parts: (1) routing all RST_STREAM writes through the encoder chain via encoder().writeRstStream(), and (2) introducing Http2MaxRstFrameLimitEncoder that tracks and rate-limits outgoing RST frames, closing the connection when the threshold is exceeded. Both components are present and enabled by default for servers (200 RST frames per 30-second window). The fix was authored by upstream Netty maintainer Norman Maurer (norman_maurer@apple.com) in commit 009bd17b38 (August 2025) and was included in the upstream 4.1.128.Final release (October 2025), which TuxCare onboarded on October 1, 2026. This is a vendor-authored fix, not a TuxCare backport." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-58056 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2025-58056" }, "action_statement": "Vulnerability CVE-2025-58056 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-31T11:21:00.129554+00:00", "status_notes": "Vulnerability CVE-2025-58057 does not affect version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2. not_affected \u2014 The upstream Netty project fixed CVE-2025-58057 in commit 34894ac73b (September 2025) by modifying BrotliDecoder and other decompressing decoders to forward decompressed buffers incrementally instead of accumulating them in a list. This fix shipped in Netty version 4.1.128.Final. When TuxCare onboarded 4.1.128.Final in October 2026, the fix was already present in the upstream release. The curre...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-58057" }, "impact_statement": "not_affected \u2014 The upstream Netty project fixed CVE-2025-58057 in commit 34894ac73b (September 2025) by modifying BrotliDecoder and other decompressing decoders to forward decompressed buffers incrementally instead of accumulating them in a list. This fix shipped in Netty version 4.1.128.Final. When TuxCare onboarded 4.1.128.Final in October 2026, the fix was already present in the upstream release. The curre..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:57:00.128587+00:00", "status_notes": "Vulnerability CVE-2026-33870 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-33870" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-41417 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-41417" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42580 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42580" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42581 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42581" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-42587 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-42587" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-44249" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-47244" }, "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-48043 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-48043" }, "action_statement": "Vulnerability CVE-2026-48043 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-50020 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-50020" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-55833 is fixed in version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-55833" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" }, "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T18:56:40.085887+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" }, "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.128.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.128.Final-tuxcare.2 of io.netty:netty-testsuite-http2." } ] }