{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c61df2d0-2017-5437-a9f6-4072070269db",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcpkix-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4",
      "version": "1.77-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcpkix-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8eb54a6f-b258-5d5e-810d-f2b5339c0de3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c17c12bc-ab5e-5c5f-a98f-03a38f67662f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:73564255-b741-5689-85e2-20b49ae378c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e7c1898b-4568-5c4c-8efb-9bc8ef328834",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0fa0595e-9d1f-5292-ba5b-229ff410041f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1ccf8f31-ccae-59b1-bb3f-0fc6140d47d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bd3cf170-d62a-520b-899a-b126fef5375b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:05a628ca-44bd-5591-8915-13b104f3d2df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5089604e-8fd1-5f46-aabe-fbfc413018bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:adabf072-ff4f-5678-a8ee-18345125d0ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:63405653-a498-5045-8b75-03868eb1ae0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1ffb0317-9de3-5b96-a621-bef0d664e664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:73a13437-689d-570f-8e69-3ebe7ee28b09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b531110c-7231-5e5b-87b8-21d19d40ce86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2454ffc5-5e7f-54a6-8c8c-d32976163c99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9d6f7660-b89d-5236-b006-e826c0e4ab8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:33018ef8-704d-5252-9163-5fae4d4abf50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:efa85694-e34d-5f20-88a6-18ede4a931c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:767b4f8c-4c31-510e-8405-f93e240bd116",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30171 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:36eaf6bb-b66b-5706-91ca-296367529a26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1610de35-10d6-5d34-9eae-4df8e01726c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1f2e96f2-19c5-5bdf-82e2-a582984a68e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:36b8796a-5af1-5778-badd-f9e08d3db539",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8885 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7052563b-4fe5-53c1-8f63-8fd7a149ecc0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2026-5588",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d9a237fc-14c1-527c-8fd3-1116f54dd254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5588 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c2e2c536-a2ef-5cca-9613-b396a98fcc6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcpkix-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk14@1.77-tuxcare.4"
    }
  ]
}