{
  "@id": "urn:uuid:51336dee-5e44-4883-9fe2-cfb998ea00f0",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 19,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:21:00.129554+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-31T11:21:00.129554+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init. not_affected \u2014 The target repository (Netty 4.1.117.Final) is NOT affected by CVE-2024-47535. The vulnerability has been fixed by the upstream vendor (Netty) and the fix was already present in the 4.1.117.Final release that TuxCare onboarded. The fix introduces BoundedInputStream to limit file reads during system initialization, preventing memory exhaustion attacks via large files at /etc/os-release, /usr/lib...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "impact_statement": "not_affected \u2014 The target repository (Netty 4.1.117.Final) is NOT affected by CVE-2024-47535. The vulnerability has been fixed by the upstream vendor (Netty) and the fix was already present in the 4.1.117.Final release that TuxCare onboarded. The fix introduces BoundedInputStream to limit file reads during system initialization, preventing memory exhaustion attacks via large files at /etc/os-release, /usr/lib..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init, and is fixed in 4.1.117.Final-tuxcare.3.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init, and is fixed in 4.1.117.Final-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.117.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init, and is fixed in 4.1.117.Final-tuxcare.3.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client-runtime-init, and is fixed in 4.1.117.Final-tuxcare.3."
    }
  ]
}