{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0ab2c3fa-1f03-5481-978b-64d5b06b54cf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcpg-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2",
      "version": "1.77-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcpg-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:25b585d6-7c76-5def-916f-8439f10a52ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be801a77-a895-5665-895e-c497d6fdfe58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5f95c8d-b018-5a3c-b952-68758e37d45f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98648fa3-5f82-5174-abf7-83cab5536c8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a6d4ed23-09ec-57a3-b7e4-30e0707ee50a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fd7b1776-1ade-5e33-9ed6-6fc35789efa0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7b88b337-f837-5db1-b408-3cadf990ca61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b5378f0-ec95-5d4c-a7c8-c0e4e5a999d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5cc3b5eb-1f03-5cc1-a2c6-fb1958346fab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0b13892b-6357-50fb-be75-31a0285b2f86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd87fd3c-7074-5868-966d-d06fa2f9692e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9f389d0-755d-5289-8e37-e756e0541930",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ae530aee-993d-5a24-8771-75ef618470c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e2a014c1-fec7-5ef0-89e7-0e78218c716b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:134db9d0-730a-5d22-bfbf-664bd9b7d517",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb955e0d-4541-5db8-8afc-2068fb0b953c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab43f94c-f80e-5836-934c-63760cda27a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a686eb52-d9d5-511e-9cab-2fcf72ba749a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ebbfe964-4f3e-5292-8c0a-9cfaa7a6e8bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a47c15a0-15cc-59bd-ad7e-24326ffa1fdc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db3d9b67-c249-5625-a068-b03e291edb59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34447 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3a721ff7-fb04-5c81-a575-faf2d7282190",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c96604da-3d01-5bca-8c8b-d99cc40b31c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f6c8632-e0a4-5ce4-ab9c-c35c56f76ef0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    },
    {
      "id": "CVE-2026-3505",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2bb252cf-b0eb-5d2d-8ee7-b9d09f69f37d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3505 affects version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14, and is fixed in 1.77-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b5ae7cb-84a0-562f-9374-d024062e1ec7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcpg-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcpg-jdk14@1.77-tuxcare.2"
    }
  ]
}