{ "@id": "urn:uuid:c85b13b7-9bd5-4ce7-9449-8f99beab9fe7", "role": "Document Creator", "author": "https://tuxcare.com", "version": 3, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-09-30T07:21:00.493424+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2023-34462 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2023-34462" }, "action_statement": "Vulnerability CVE-2023-34462 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2024-29025 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2024-29025" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2024-47535 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2024-47535" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2025-25193 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-25193" }, "action_statement": "Vulnerability CVE-2025-25193 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2025-55163 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-55163" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2025-58056 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-58056" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2025-58057 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-58057" }, "action_statement": "Vulnerability CVE-2025-58057 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2025-59419 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-59419" }, "action_statement": "Vulnerability CVE-2025-59419 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-41417 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-41417" }, "action_statement": "Vulnerability CVE-2026-41417 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-42577 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42577" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42578 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42578" }, "action_statement": "Vulnerability CVE-2026-42578 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42579 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42579" }, "action_statement": "Vulnerability CVE-2026-42579 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42580 does not affect version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom. not_affected \u2014 Target version 4.1.87.Final uses a different parsing architecture (String-based with Integer.parseInt()) that has built-in overflow protection, unlike the vulnerable byte[] manual parsing introduced in later versions (4.1.94+). Java's Integer.parseInt(hex, 16) performs pre-multiplication overflow checks and throws NumberFormatException for values exceeding Integer.MAX_VALUE, preventing the requ...", "vulnerability": { "name": "CVE-2026-42580" }, "impact_statement": "not_affected \u2014 Target version 4.1.87.Final uses a different parsing architecture (String-based with Integer.parseInt()) that has built-in overflow protection, unlike the vulnerable byte[] manual parsing introduced in later versions (4.1.94+). Java's Integer.parseInt(hex, 16) performs pre-multiplication overflow checks and throws NumberFormatException for values exceeding Integer.MAX_VALUE, preventing the requ..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42583 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42583" }, "action_statement": "Vulnerability CVE-2026-42583 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-42585 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42585" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42586 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42586" }, "action_statement": "Vulnerability CVE-2026-42586 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-44248 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44248" }, "action_statement": "Vulnerability CVE-2026-44248 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-44249 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44249" }, "action_statement": "Vulnerability CVE-2026-44249 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44250" }, "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:21:00.493424+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44891" }, "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-44893" }, "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-45536 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-45536" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:21:00.493424+00:00", "status_notes": "Vulnerability CVE-2026-45673 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-45673" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:21:00.493424+00:00", "status_notes": "Vulnerability CVE-2026-45674 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-45674" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-46340 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-46340" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-47244 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-47244" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-47691" }, "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:21:00.493424+00:00", "status_notes": "Vulnerability CVE-2026-48006 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-48006" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-48043 does not affect version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom. not_affected \u2014 Netty 4.1.87.Final is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (4.1.135.Final-SNAPSHOT, June 2026) that uses an anonymous ChannelInboundHandlerAdapter in the EmbeddedChannel pipeline without try-finally protection around buf.release(). This code path does not exist in 4.1.87.Final (January 2023). The target version uses a simpler architecture whe...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-48043" }, "impact_statement": "not_affected \u2014 Netty 4.1.87.Final is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (4.1.135.Final-SNAPSHOT, June 2026) that uses an anonymous ChannelInboundHandlerAdapter in the EmbeddedChannel pipeline without try-finally protection around buf.release(). This code path does not exist in 4.1.87.Final (January 2023). The target version uses a simpler architecture whe..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-48059" }, "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-50010 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-50010" }, "action_statement": "Vulnerability CVE-2026-50010 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-55851" }, "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-56817 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56817" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56818 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56818" }, "action_statement": "Vulnerability CVE-2026-56818 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T07:20:02.936736+00:00", "status_notes": "Vulnerability CVE-2026-56819 is fixed in version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56819" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56820 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56820" }, "action_statement": "Vulnerability CVE-2026-56820 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56821 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56821" }, "action_statement": "Vulnerability CVE-2026-56821 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-56822 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-56822" }, "action_statement": "Vulnerability CVE-2026-56822 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59902 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59902" }, "action_statement": "Vulnerability CVE-2026-59902 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59919" }, "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59920" }, "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-73507" }, "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-73508" }, "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-bom@4.1.87.Final-tuxcare.1" } } ], "timestamp": "2026-09-30T06:55:02.037135+00:00", "status_notes": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom.", "vulnerability": { "name": "GHSA-xpw8-rcwv-8f8p" }, "action_statement": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.87.Final-tuxcare.1 of io.netty:netty-bom." } ] }