{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1401890-bf97-5325-9b4f-c71055b70af7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bctls-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2",
      "version": "1.77-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bctls-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:19a34041-ee35-520f-99dc-168562b6bfa7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:17255fe6-d604-5873-a574-17d9211188f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b2d9c6b5-dcb6-588b-90d3-327340871456",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c278cca-ba0f-5bfa-9832-e4df8d3fef93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8fa778fc-a157-5cad-b6bf-021c7146b231",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6030b0ce-1524-5ecc-91a2-d83fd530be20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:27c75caa-4c44-5bcb-9bca-61e1c1548770",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:85f636a7-05a4-5f8a-84da-edd84dbec913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:68ca7ca0-8857-512d-8a5d-f445abce5c11",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79744b13-1f2f-50ee-9e53-723a3f40725a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c4a6401b-5e6a-5e98-89ed-8ccf5a927656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e947f034-1399-5d65-a33d-0390991177ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:13adcbf3-3284-581d-83f8-743f815a002a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:93f95907-6b25-573d-8158-1ad711026256",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c85b168e-4fcd-5c98-a2c5-984f09877ac3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9247c661-3db9-5ff4-b79e-146ac35d52b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cb045cf6-5998-5e01-b039-e593475959df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8873d6ea-eae8-57d3-a2cb-917cb83b7924",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a85340b5-9c77-5396-a1cb-b832c001abf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b919faa4-a17d-53fc-b2dc-b663ef8bcbca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e58b4a2f-e317-5fab-9527-c98155ef7c9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34447 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:adc3107a-143f-5689-b87c-556d3f7a00e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:00511283-1ad8-5a80-891b-59b8fc941934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:48b1ce4e-bfde-5c6d-b2c3-2deeeb78d98e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:93946b74-4d81-5cc9-b59d-9cfdc75e0678",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bctls-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.2"
    }
  ]
}