{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f61ce730-cf71-5c00-be64-5acff44cbe99",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcpg-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2",
      "version": "1.75-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcpg-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.75"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:345f7102-c488-5aa8-90e0-3228026f9a98",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3aed171f-dcad-5bac-8fa9-08b9772201de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a68fce1a-2faa-5862-b0d6-4f4a7aaa7d8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c16dc5ae-b1ab-5d39-8680-e09d00691a62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:758e65f2-881b-5a89-b111-127c70e2a036",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:428458df-c1b0-544f-a9c9-9dde06a2b110",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ddaaeac6-30e6-5aa5-bc9e-58befac4ef85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:befbb430-91a2-5578-97e4-611b9e149bf7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6cca4bc6-5f4b-543e-92e1-af23f750cacc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b8b4d81-154d-5aa7-bbe7-64650266120e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4571b7a-a703-54af-97bc-6442fc5500b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e526d5c-4278-5a67-b0c5-997ab38b0114",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:801fb6b4-d538-5125-8062-fc4848e30c79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7bcbdcbc-7ce9-5394-8d30-2f98cc3747ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd330571-19a7-500c-beb6-5ca017460fdc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7e06c0a8-e6e2-50a9-9f95-d2827f1822e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f2ed0d8f-4558-5dc2-a1c8-1ddc189e0d0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:885b6d6a-1a02-5a54-ac67-13acabd8ddff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41934054-9be3-53e7-af0b-6934f70bcac6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f794881-8dac-546d-8e98-63a8882a238b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30172 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d546dd64-bbe2-5987-a3f9-0542e2414e89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:602ae021-5bcc-5e5f-b36c-40755ea71393",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c73d8399-1dea-55fe-8a67-e46d300f31e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65abeafc-bbbf-54df-89a1-17265adcb86b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2026-3505",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d3144636-b42d-5b94-8fb6-1aaf5b7c2eae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-3505 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ad86943-542e-5412-9432-acc3da9544b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.75-tuxcare.2"
    }
  ]
}