{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f858f379-f1fb-5d26-a5e3-c9d2394afc26",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcmail-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2",
      "version": "1.77-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcmail-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:026af2a1-f6dc-5fbe-8d9a-c17f06bfdc8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:025bf638-d26c-551c-80b7-3b66056cb14c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d8a6ccf1-977a-5242-8d0f-4c714478a462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9462c3a3-c99b-5117-9b55-0ec982e26ad3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ccb3d715-1551-50cc-a898-dd93d25de240",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97f5fbce-900b-5fea-afcd-8c86cfe9f7e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4db7437b-8372-51f7-aabd-9abf315db696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e691598-c679-5ab8-ad1a-65bd039e3236",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:011c27aa-1aec-5faf-8407-6f04510902d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e8b7da79-371a-5e24-9d28-dcb0185346ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ad7f2b5-0dea-52a8-af17-b2e24011c351",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:358d819d-6c5c-5b3c-b58d-20e10e23ad9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0099743e-5bd4-53d6-a1c2-526347756e1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ccf5e0d-7541-52e3-b418-92a156acdf44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08fe2332-686f-5d32-a0ee-060d62d59398",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4a44578-8fb4-55b3-a3a6-bf503229fdc9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:af6914e8-97b5-5ac1-a04f-a01086447e27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:91d66630-4aa7-5615-825f-bc09bf225dc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:904d8593-5d7c-56e5-9d19-e8c88b931e63",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2e3269c-4c72-50bc-b766-4879b7808053",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a6a2dac-78f3-57d1-8899-cfa9ca14c500",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34447 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff71df11-7589-5a56-8491-52188fa2b739",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbffa6cf-56f2-5901-b9d4-e2435476eee5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4c43b83-2116-55f1-a3b5-b63cb03f6132",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-5588",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f496941-8d8d-50b8-9c59-020b770d2f3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5588 affects version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9cb4b825-3d71-5852-a2f9-4b1044752a4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcmail-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.2"
    }
  ]
}