{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5da1d443-17db-5f2d-a62c-84933b3cb69e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcutil-jdk15to18",
      "purl": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2",
      "version": "1.77-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcutil-jdk15to18",
            "purl": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.77"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:643bee35-7a4a-57e1-8cca-e44cc3d7aa64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4bffeaf3-9a08-5144-83d2-1c35b7f3ceb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2020-28052",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a00c3dea-d193-57ea-a94d-82b3d5c123d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28052 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3697bbb-4d9e-5e75-ba12-2c520b170cff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a8d8380e-1bdf-5946-9e3a-ae2d4f95f433",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:30f26e5e-f592-5b2a-9b5e-45f2d6404d9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29857 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec490fa9-894a-5780-a22f-3372618fde15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aea6b785-ebf7-5b0e-a016-5bde07dbc1e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-30172 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7b35d767-194f-52b9-961e-232b025bbb78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34447 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eb63db2f-9e55-5957-acf1-b3f404b14043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4b104650-324d-54f4-a675-1259b69b14f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:524017ed-0e22-53f3-80a6-4b5d92a7b7e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2026-13506",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e79e5f6-4333-56d2-a002-7c79f947adfc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-13506 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18, and is fixed in 1.77-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:85003df6-5ef0-5a20-9e44-ffdcee64811c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18."
      }
    },
    {
      "id": "CVE-2026-8763",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:13a930bc-36ce-55b7-8450-18312683ec57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8763 affects version 1.77-tuxcare.2 of org.bouncycastle:bcutil-jdk15to18, and is fixed in 1.77-tuxcare.3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.77-tuxcare.2"
    }
  ]
}