{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a5a75d84-2c73-5c21-b8a9-621e2ddfaf2e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bcprov-ext-jdk18on",
      "purl": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6",
      "type": "library",
      "group": "org.bouncycastle",
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6",
      "version": "1.78.1-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "bcprov-ext-jdk18on",
            "purl": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1",
            "type": "library",
            "group": "org.bouncycastle",
            "version": "1.78.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2015-7940",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:875d99d3-c91c-5a68-8517-34f9c393135a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7940 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000338",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:66e228e0-9fc6-5977-86b8-639524437b5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000338 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000339",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ad087cf6-0c5f-56e9-ab09-aab784cac2a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000339 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000341",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c09c6188-5887-5639-a3bc-41034cad67b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000341 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000342",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:50abb895-0c77-534e-9aa9-7ea5e74e701f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000342 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000343",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4472e61f-165d-535c-ab28-9fb0c1edcf70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000343 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000344",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0ba983a3-ac2f-52aa-a283-8eea7648e9c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000344 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000345",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b06cb62a-a1e9-5501-973b-3760331fb4e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000345 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000346",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:33b737a2-e066-581d-87ba-218aff845a79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000346 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2016-1000352",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:903d6ad3-5534-512e-80ed-7f982ab61efe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000352 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2018-1000180",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:78534837-cfe1-5ca5-bf1f-d3c5546f03e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1000180 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2020-15522",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:00d7d7a6-d536-5352-87a6-555e67dee13e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15522 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2020-26939",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cf1bbcbd-bbc8-5509-acd7-dbbe88be941c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26939 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2023-33201",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b02d77bf-eb53-5da6-999a-0cbbc9c5cc58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33201 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2023-33202",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cfeed1d5-bb3c-5da1-be53-1e5b4b61e321",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-33202 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2024-29857",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:99132c9e-6a62-5ad5-8f32-61f87d6efbc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29857 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2024-30171",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:961ae2c0-8012-52d4-9c20-89f859c14eb5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30171 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2024-30172",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:72275f69-9f0b-5e4f-82fc-cfcb46ac94a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-30172 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2024-34447",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6781ac3d-ebf3-54c3-ae39-a20a8ab9e4c0",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-34447 does not affect version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on. Version 1.78.1 is not vulnerable. Summary: CVE-2024-34447 is NOT present in this Bouncy Castle 1.78.1 codebase. The vulnerability was fixed in commit c47f6444a on April 3, 2024, and this fix is present in the current version. The fix prevents hostname verification from being performed against DNS-resolved IP addresses by setting peerHost to null instead of an IP address when in client mode without trusting the name service. [terminalized not_affected from patch_application_manual/not_vulnerable]",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-14813",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bedef8d9-822d-525c-918c-26563395442f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14813 is fixed in version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2025-8885",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f29b35ab-919f-53fb-bfb6-e8cfc176a457",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-8885 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2025-8916",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fb9b9f1e-615f-5e58-b552-f3ecd513973b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-8916 is fixed in version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2026-0636",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:42828148-cec3-5b14-a06c-565b97d6c121",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0636 is fixed in version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2026-13506",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:145628ae-9941-5577-9e99-3bb69befe564",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-13506 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on, and is fixed in 1.78.1-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-3505",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:35288204-025d-561f-a715-c15807c0ec12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-3505 is fixed in version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2026-5588",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d7b98d20-cdf5-5ce9-891d-b6b0841eae20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5588 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on, and is fixed in 1.78.1-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-5598",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0dd41dd6-6aca-515f-ba79-73d4167cb15a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5598 is fixed in version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on."
      }
    },
    {
      "id": "CVE-2026-8763",
      "affects": [
        {
          "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bbeb1943-2cfe-5550-9443-841c03973966",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8763 affects version 1.78.1-tuxcare.6 of org.bouncycastle:bcprov-ext-jdk18on, and is fixed in 1.78.1-tuxcare.9."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78.1-tuxcare.6"
    }
  ]
}