{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c124b866-ddbe-5d1a-9b11-cefe5e950cd1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcmail-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3",
      "version": "1.77-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcmail-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5af5b35a-2ede-5a8c-8895-e3e8d8f0e563",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c76cde5a-0e60-5203-be2b-2f60c8c9a46b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5cc1c0ca-0405-5eb0-b2d5-55a025835da1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04a6947a-a798-5c31-8222-1cf2d4fb9162",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e00a3af5-87b7-52f1-ba14-842a1f275c3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:87bc7efd-200a-5632-8682-e00092166fb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:01c7b12c-d6c6-5fe5-ab96-a0de16426369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bb8d3432-7c59-5e44-b0ea-df7d46bd087d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df74893e-5476-53f2-aee2-34dac153c8a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55c4e7de-f824-516f-9341-48a503521b5a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7b2c47ac-c6cd-5079-a7e6-9c95b06d5bb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b280a92e-7a32-564c-b462-c73731df5369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:42c54594-caa2-5caf-af83-df6f6672497b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:43168d14-7823-5f8a-80b2-9ed5d9b68db1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7af0c101-e7a2-545f-bd6d-9f4156baca85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b0f98725-ce5b-5e87-b6d9-5d2f460192a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0f28a2ba-96d7-5670-9aaa-99e4fcef7090",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4a76b955-38ee-5552-ba6a-91fb5634c5fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4fdda352-ed66-56a9-bde8-5bed2d85c700",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30171 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c3245cce-6587-5a1a-ba0f-0577045c5893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:111c01f8-4234-5317-a4ae-89532069b54c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1e418db9-9698-5225-9a54-c0cede548896",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:91352784-cf28-5aed-8a20-5f6eb378a491",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8885 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b4e81b64-09a8-5275-b8d3-9dafed03638b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-5588",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d95ea58-5a3d-534f-bbbc-3aefeda794f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5588 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df9c59d2-c4ea-5417-be31-530e8c3736d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcmail-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcmail-jdk14@1.77-tuxcare.3"
    }
  ]
}