{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:491915eb-c1f9-5290-b708-861d9efdd5a0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcprov-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4",
      "version": "1.77-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcprov-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e70b1410-d6b5-5d81-a476-54f326416442",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9b1a0388-4cb3-5a19-b46b-e51bdd4954cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:66f3ce4e-a0a6-5cba-a5b7-ea096b810f63",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:04bf5ccb-e411-516c-abdc-1289b1216916",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2a2b2cf1-625e-56c8-9873-89e1ef4ff284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:577e3a18-c285-50e6-b782-77a025390fc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:20c77654-fea0-52e3-85f0-6105746bfd75",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2dc3afe7-4ecf-5ddc-b5c4-daedf7708e73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ea3473a2-3c4e-5847-a1de-0895973950f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0bc440df-8407-55e0-9fc0-0cc4e9b6a8bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:12769acb-0b90-5f71-91ca-1214ad606715",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2a02f1c4-e227-516a-b535-e98b53ec35b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ea09175-844f-5485-bd22-c9ea3b44c2b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dfb6f5e6-3063-5b01-9e34-80f4b6192961",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0c79e7c0-cb7a-5f61-8cad-eb470c83d73a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:68d6eaae-2441-5004-b17f-37a56ec4dfc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:24b0037d-c117-5481-b850-37ce681bd20b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fb23ddf3-4680-53a0-aef3-63c8d88493a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d16592e3-866a-5664-84fb-118434542997",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30171 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c5b02748-ed98-5c39-a5ec-40eb2db216c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dd38f254-95a6-52ba-8658-d176f7c5ffdc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ea1e6ed1-6409-57dd-a66e-949dd83d0cbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:43123f15-6dd9-5ea6-a24d-6d09f769da92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8885 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:86d97d22-1e17-52d9-a823-c0cb3835521b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eef0f2fa-4e89-58e1-89fa-8ad264d1b1d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.4 of org.bouncycastle:bcprov-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcprov-jdk14@1.77-tuxcare.4"
    }
  ]
}