{
  "@id": "urn:uuid:fffadbe5-8f85-4239-b32e-d5b7b3988be3",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 23,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T12:20:26.492098+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2014-3488 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2014-3488"
      },
      "action_statement": "Vulnerability CVE-2014-3488 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-4970 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2016-4970"
      },
      "action_statement": "Vulnerability CVE-2016-4970 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2019-20445 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2019-20445"
      },
      "action_statement": "Vulnerability CVE-2019-20445 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2020-11612 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2020-11612"
      },
      "action_statement": "Vulnerability CVE-2020-11612 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-29T03:28:09.355486+00:00",
      "status_notes": "Vulnerability CVE-2020-7238 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2020-7238"
      },
      "action_statement": "Vulnerability CVE-2020-7238 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37136 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2021-37136"
      },
      "action_statement": "Vulnerability CVE-2021-37136 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2021-37137 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2021-37137"
      },
      "action_statement": "Vulnerability CVE-2021-37137 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-31T12:20:26.492098+00:00",
      "status_notes": "Vulnerability CVE-2023-34462 does not affect version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native. not_affected \u2014 CVE-2023-34462 fix was already present in upstream Netty 4.1.115.Final release. The vulnerability (unvalidated ClientHello length allowing up to 16MB allocations) was fixed by commit 535da17e45 in June 2023, first shipped in netty-4.1.94.Final. The TuxCare 4.1.115.Final branch (November 2024 base) inherited this fix from upstream. The target contains the complete mitigation: maxClientHelloLengt...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-34462"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-34462 fix was already present in upstream Netty 4.1.115.Final release. The vulnerability (unvalidated ClientHello length allowing up to 16MB allocations) was fixed by commit 535da17e45 in June 2023, first shipped in netty-4.1.94.Final. The TuxCare 4.1.115.Final branch (November 2024 base) inherited this fix from upstream. The target contains the complete mitigation: maxClientHelloLengt..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-29T10:21:18.524281+00:00",
      "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native 4.1.115.Final-tuxcare.7.",
      "vulnerability": {
        "name": "CVE-2023-4586"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-31T11:23:00.236792+00:00",
      "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native. not_affected \u2014 The target Netty 4.1.115.Final is not affected by CVE-2024-47535. The vulnerability fix (BoundedInputStream wrapper limiting file reads to prevent memory exhaustion) was already present in the upstream Netty 4.1.115.Final release before TuxCare onboarded this version. All three vulnerable file-reading locations (PlatformDependent.java for /etc/os-release, NetUtil.java for /proc/sys/net/core/som...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-47535"
      },
      "impact_statement": "not_affected \u2014 The target Netty 4.1.115.Final is not affected by CVE-2024-47535. The vulnerability fix (BoundedInputStream wrapper limiting file reads to prevent memory exhaustion) was already present in the upstream Netty 4.1.115.Final release before TuxCare onboarded this version. All three vulnerable file-reading locations (PlatformDependent.java for /etc/os-release, NetUtil.java for /proc/sys/net/core/som..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-24970 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2025-24970"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-25193 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2025-25193"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-58057 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2025-58057"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-27T23:06:24.099273+00:00",
      "status_notes": "Vulnerability CVE-2026-42577 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-42577"
      },
      "action_statement": "Vulnerability CVE-2026-42577 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.13."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42579 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-42579"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-42583"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-44249"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-16T01:17:00.135394+00:00",
      "status_notes": "Vulnerability CVE-2026-45416 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "action_statement": "Vulnerability CVE-2026-45416 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-16T01:17:00.135394+00:00",
      "status_notes": "Vulnerability CVE-2026-45536 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-45536"
      },
      "action_statement": "Vulnerability CVE-2026-45536 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-16T01:17:00.135394+00:00",
      "status_notes": "Vulnerability CVE-2026-45673 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-45673"
      },
      "action_statement": "Vulnerability CVE-2026-45673 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-45674 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-45674"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47691 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-47691"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-50010"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native.",
      "vulnerability": {
        "name": "CVE-2026-59901"
      },
      "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8.",
      "vulnerability": {
        "name": "CVE-2026-73508"
      },
      "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-16T01:17:00.135394+00:00",
      "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-75595"
      },
      "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-16T01:17:00.135394+00:00",
      "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-75596"
      },
      "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.115.Final-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-testsuite-native, and is fixed in 4.1.115.Final-tuxcare.8."
    }
  ]
}