{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:18d8849c-02d0-5a61-bc57-2e1393e15d53",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcutil-jdk14",
      "purl": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2",
      "version": "1.75-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcutil-jdk14",
            "purl": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.75"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:53c15cb7-ec57-55e9-b745-5979d12de445",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c53f012a-919c-5fea-ae2b-9a54c68ddc66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6829c362-a822-5f24-9106-1841c6736647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000340",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:949fca07-1910-5b3b-91cd-87fa71e783a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000340 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f8ec5cc-66eb-5271-99d8-56e8232caba8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09103b40-7168-5cf1-8561-8a2ab020fcfc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:20f06707-291e-53ee-af7f-ce54b0a7ed7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a44e29e-6449-5c6c-aaa3-0b558971cbbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:893dfd2d-9abd-5a1c-a7cc-2244a2f2c600",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9095b4d3-11b5-5962-809f-2a52b2470b6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca5329c8-6daa-52b2-b250-0de82376d28b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77f646a0-f8ae-55fc-924e-f129556155b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dffb98d2-e3fa-5c25-a5f3-b89a2d6dc0c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b638135-b945-539a-9bf0-8cf51af8cf5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a849709-c1e2-5c42-9684-73e11cc60a59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:edf2a5e1-f6fc-54b8-8924-c08d4a8172d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fbb401ab-2697-5339-8e31-bd99a3729e40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2224d2a-ad4f-5bdc-b6aa-95814da3d08a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de21c182-c1b3-5a00-b23b-147fc46be221",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2cf04212-2eb4-5856-af5b-a4d8776d8eb6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30172 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:695c9453-e905-5804-8a5d-9de032a19996",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34447 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a46324e5-8c5f-5a27-9abd-a58a1c457e19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec319d34-efac-508d-ba43-23a28ca6e817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:27ec82ba-c1cf-5b5a-a523-b4f3d07c0231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22e1cd35-98b9-5bca-a552-de2fe686e00b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.75-tuxcare.2 of org.bouncycastle:bcutil-jdk14."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcutil-jdk14@1.75-tuxcare.2"
    }
  ]
}