{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b8aa560d-699f-5f94-9e1d-2d892d517336",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcmail-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1",
      "version": "1.75-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcmail-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.75"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b5b4e0c-2346-5cd5-a8c3-0d0432847957",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:636e1a92-bf64-5934-ac3d-7dfea1145f59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89347410-9ffb-5732-85e0-debe866371c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e4ce416-e153-5b07-a45e-9a92b8e52572",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b835fad4-f483-5c6d-b68d-8511a5ed5458",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ebe76b5-184e-5f4e-b07a-0230d7b7b79c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c3c1f1e-a4b1-5595-8b2c-eba960906bec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aff57186-34e1-5883-ab6a-f4e56a6ae303",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a41d49d-a9ca-5a95-9a85-d47b7d25eaa4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef920711-464e-5530-8e09-46f84e52e14f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ddff0a68-48c5-59fc-9dab-c8a05fb7ceb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:254793bc-96aa-517e-b12a-81567b8a9a2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e86da6a3-5e82-5f60-a388-203850453b9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d30efea1-d362-5ded-96a5-12e790489f13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0fb6711-9c6b-5454-9e6d-69cd4eca5a55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:804f806c-f0a0-5efe-82c1-7bb37946855c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9cf355e4-f66c-5543-910d-a763dc08760a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4789c474-4a3f-5621-a285-d949f09ee754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2333116e-4922-5bb5-b677-e56625199dda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ce0cad34-fd53-5074-a4fe-03caf52bcced",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30172 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3d2a04b-e7ab-5b54-bdf0-bd8cc81bff91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27a41c79-7534-5af5-875f-4ec5ac612392",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d335a7f-2532-52da-b124-dd969d039476",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c17bc9c7-8ff9-5705-b672-f313ae317432",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-5588",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a6ac86e-ff40-5d0a-8154-7dfc429c3ce8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5588 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:90139029-ca98-5057-8429-b01eeb4cb19a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.75-tuxcare.1 of org.bouncycastle:bcmail-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.75-tuxcare.1"
    }
  ]
}