{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:faa43f09-1823-5896-9355-dd3a1cec22ff",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcprov-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3",
      "version": "1.77-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcprov-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c2bf2fc5-f50a-5e27-83b9-d9cf81b27b4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:17379cae-bfce-5a9a-94d7-26bcaae24b9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a30fec0e-94b5-533c-8238-273bee395259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:81b5d424-5291-50f5-a16c-87cdd4843da9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:118e73ac-f9a6-59fe-8e44-a43ea92f3975",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:24451055-9e3e-5d7f-8723-af7a62e821ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f85f38a3-8563-5ccf-bf8a-27cbab2e6593",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38957afb-4408-5a7a-82fe-187dddc91839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0409ac8f-ccda-50ae-a3a5-fedfba97534f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:12aea99b-8bea-54b2-acf2-9f732d7f29d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c026709e-b2d8-5a99-8886-5d70d0f82468",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f9c1d56-a68c-5966-8e8f-f6cfd4d64610",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c271232-61d9-5c96-b012-087c3e977464",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:200f8f55-0348-5cb5-ac4b-b8380369a9c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:447137dc-cbab-5eb6-a910-ec995012b61e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3397aaf8-c028-5dc2-b26e-aad9c15aa33c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4a3b9126-7af6-5971-8615-71fda97e5d1f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8b584c0e-9aa2-5c4c-afb8-b9f6bd07ece0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8d48bdbc-3187-5268-b860-0e639581f77c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30171 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fc8cd104-dcdc-5510-a895-8ad419f2569d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02d4f623-836b-5d47-85de-5b671340d11f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4470e89f-99d3-59b7-a7f1-0ec2916eac53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:234f07aa-1eb2-5f76-82e9-7106a00a3b0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8885 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c2354084-2480-5e4b-9b26-73be090e6a12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:766d1780-3bd6-5daa-b152-7fac348d5519",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bcprov-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.3"
    }
  ]
}