{
  "@id": "urn:uuid:e57f1a51-41ae-4579-b6be-d4824206d226",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 19,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T09:47:00.050250+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-31T08:43:00.070630+00:00",
      "status_notes": "Vulnerability CVE-2022-41881 does not affect version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy. not_affected \u2014 CVE-2022-41881 affects Netty versions prior to 4.1.86.Final. The target repository is at version 4.1.92.Final, which already contains the upstream fix. The vulnerability (unbounded recursion in HAProxyMessage.readNextTLV causing StackOverflowError) is not present because the fix (MAX_NESTING_LEVEL constant and nestingLevel parameter with validation) was included in the upstream release 4.1.86.F...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-41881"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-41881 affects Netty versions prior to 4.1.86.Final. The target repository is at version 4.1.92.Final, which already contains the upstream fix. The vulnerability (unbounded recursion in HAProxyMessage.readNextTLV causing StackOverflowError) is not present because the fix (MAX_NESTING_LEVEL constant and nestingLevel parameter with validation) was included in the upstream release 4.1.86.F..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-44893"
      },
      "action_statement": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-48059"
      },
      "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-55851"
      },
      "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "CVE-2026-59919"
      },
      "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "GHSA-mfg7-5gfp-c4w3"
      },
      "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6",
          "identifiers": {
            "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.92.Final-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-01T12:55:01.306742+00:00",
      "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy.",
      "vulnerability": {
        "name": "GHSA-v74w-7mr3-4qg3"
      },
      "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.6 of io.netty:netty-codec-haproxy."
    }
  ]
}