{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e2b90919-b8a5-5d31-897d-e7ecf6b3da3b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bctls-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3",
      "version": "1.77-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "bctls-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0911d4bb-5319-552b-93c1-891c579bfca8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:344870af-9155-59fa-9100-6b6be5e60f62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:60b7babe-b6f8-5dfa-a8e4-f257d81584d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:06371d01-e100-5046-981a-7217218cf275",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:97757681-dd1b-5113-ab2b-4610ad4b2dbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7f59e80b-931c-55af-9025-7b37463939e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0e1099aa-d968-51dc-8896-71c87bec0949",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c7bc4197-5b8e-5e3d-996d-7c4903a08666",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:af8bcd4f-0daa-541b-9a51-f5d6af1d577f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:62ff8b9a-99d4-504a-b2ba-57c7943329d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b47c263a-6247-5d07-865e-6435bdb3e776",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a3c214d-9477-5dc5-b243-f95a712148e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bc03dae6-c8c3-5c43-9d45-961bec327a0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff8a4be5-de4c-51ad-9c2f-20502b6c42e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0cb4e14-158d-5c79-8b30-ddd15b4e6933",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:abfa5778-2760-53ca-811d-b8b25aa3b762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:571285b3-cefe-5bf6-abff-3f63ec392066",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7c90b617-e6f1-5f3e-92f8-ed97834ea192",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c7997a13-68e1-5a20-b95f-ff3ddee8c4fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30171 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dea8e913-eb6e-57d7-a5ba-492d3bb222b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9a150e4-f965-5786-840e-5b5089f8ca2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:41325ca7-700c-5ac8-bfba-0a43f73e7804",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:efeba876-d4aa-5cf3-bcb7-26be198f8c90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8885 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d49c3c4-739b-5787-920f-8c12a9785ef1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2122db24-0a33-5172-8cb9-988fd1389781",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.3 of org.bouncycastle:bctls-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bctls-jdk14@1.77-tuxcare.3"
    }
  ]
}