{"metadata":{"timestamp":"2026-05-05T08:08:49Z"},"specVersion":"1.4","components":[{"name":"apk-mbedtls","type":"application","version":"3.0.5","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"attendedsysupgrade-common","version":"10","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1705~6639b15f62","name":"base-files"},{"type":"application","version":"2025.04.30","name":"bcm27xx-gpu-fw"},{"version":"2025.03.14","licenses":[{"license":{"name":"BSD-3-Clause"}}],"type":"application","name":"bcm27xx-utils"},{"name":"busybox","version":"1.37.0","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","cpe":"cpe:/a:busybox:busybox:1.37.0"},{"name":"ca-bundle","version":"20260223","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"type":"application"},{"name":"cgi-io","type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"2025.12.11~658b14bd"},{"name":"dnsmasq","cpe":"cpe:/a:thekelleys:dnsmasq:2.91","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2.91"},{"name":"dropbear","type":"application","licenses":[{"license":{"name":"MIT"}}],"version":"2025.89","cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89"},{"name":"e2fsprogs","cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.47.3","type":"application"},{"type":"application","version":"2025.03.17~b6e51575","licenses":[{"license":{"name":"ISC"}}],"name":"firewall4"},{"type":"application","version":"2026.02.15~8d377aa6","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"fstools"},{"name":"fwtool","type":"application","version":"2025.10.03~04cd252e","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"getrandom","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","type":"application"},{"cpe":"cpe:/a:jansson_project:jansson:2.14.1","type":"library","licenses":[{"license":{"name":"MIT"}}],"version":"2.14.1","name":"jansson"},{"type":"application","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"name":"jshn"},{"name":"jsonfilter","version":"2026.03.16~b9034210","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"6.12.85","type":"operating-system","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kernel"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-crypto-crc32c"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-crypto-hash"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-fs-vfat"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-hid"},{"name":"kmod-hid-generic","cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-input-core"},{"type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-input-evdev"},{"name":"kmod-lib-crc-ccitt","cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-lib-crc32c"},{"name":"kmod-nf-conntrack","cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"name":"kmod-nf-conntrack6","cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nf-flow"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-nf-log"},{"name":"kmod-nf-log6","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-nf-nat","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-nf-reject","cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-reject6"},{"type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nfnetlink"},{"name":"kmod-nft-core","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nft-fib"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nft-nat"},{"name":"kmod-nft-offload","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nls-base"},{"name":"kmod-nls-cp437","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-nls-iso8859-1","cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-nls-utf8","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-ppp","cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-pppoe"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-pppox"},{"name":"kmod-slhc","cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-sound-arm-bcm2835"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-sound-core"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-usb-common"},{"name":"kmod-usb-core","cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85"},{"name":"kmod-usb-hid","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application"},{"name":"libblkid","type":"library","version":"2.41.3","licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3"},{"name":"libblobmsg-json","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"version":"1.2.5","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","name":"libc"},{"name":"libcomerr","cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","version":"1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","version":"1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library","name":"libe2p"},{"name":"libext2fs","type":"library","version":"1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3"},{"version":"1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"library","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0","name":"libf2fs"},{"name":"libfdt","version":"1.7.2","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"library","cpe":"cpe:/a:dtc_project:dtc:1.7.2"},{"version":"14.3.0","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","name":"libgcc"},{"name":"libiwinfo-data","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","type":"application"},{"type":"library","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","name":"libiwinfo"},{"version":"0.18","licenses":[{"license":{"name":"MIT"}}],"type":"library","cpe":"cpe:/a:json-c:json-c:0.18","name":"libjson-c"},{"type":"application","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"name":"libjson-script"},{"name":"liblucihttp-ucode","type":"library","licenses":[{"license":{"name":"ISC"}}],"version":"2023.03.15~9b5b683f"},{"type":"library","version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp"},{"name":"libmbedtls","cpe":"cpe:/a:arm:mbed_tls:3.6.6","type":"library","version":"3.6.6","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"name":"libmnl","cpe":"cpe:/a:netfilter:libmnl:1.0.5","version":"1.0.5","licenses":[{"license":{"name":"LGPL-2.1+"}}],"type":"library"},{"name":"libnftnl","cpe":"cpe:/a:netfilter:libnftnl:1.3.1","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"1.3.1","type":"library"},{"name":"libnl-tiny","type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~40493a65"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","type":"application","name":"libpthread"},{"type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","name":"librt"},{"name":"libsmartcols","type":"library","version":"2.41.3","licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3"},{"name":"libss","cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","type":"library","version":"1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"libubox","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1","name":"libubus"},{"name":"libuci","type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~66127cd7"},{"name":"libuclient","version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"name":"libucode","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"name":"libudebug","type":"library","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.16~875e1a7a"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.01~99f1c0db","type":"library","name":"libustream-mbedtls"},{"name":"libuuid","licenses":[{"license":{"name":"BSD-3-Clause"}}],"version":"2.41.3","type":"library","cpe":"cpe:/a:kernel:util-linux:2.41.3"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","type":"application","name":"logd"},{"version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci"},{"name":"luci-app-attendedsysupgrade","type":"application","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"luci-app-firewall","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-app-package-manager"},{"name":"luci-base","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"MIT"}}],"type":"application","name":"luci-lib-uqr"},{"name":"luci-light","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"name":"luci-mod-admin-full","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"name":"luci-mod-network","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-mod-status"},{"name":"luci-mod-system","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","type":"application"},{"name":"luci-proto-ipv6","type":"application","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-proto-ppp","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"name":"luci-ssl","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca"},{"type":"application","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-theme-bootstrap"},{"name":"mkf2fs","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0","version":"1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","version":"27","licenses":[{"license":{"name":"GPL-2.0+"}}],"name":"mtd"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.26~cbb83a18","name":"netifd"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.1.6","name":"nftables-json"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.25~ee2949e3","type":"application","name":"odhcp6c"},{"name":"odhcpd-ipv6only","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.16~edf2e523"},{"name":"openwrt-keyring","type":"application","version":"2025.12.10~f0670054","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2026.04.09~5d6760b5","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"owut"},{"name":"partx-utils","version":"2.41.3","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"application","cpe":"cpe:/a:kernel:util-linux:2.41.3"},{"name":"ppp","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","type":"application","licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2"},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2","type":"application","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","name":"ppp-mod-pppoe"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd"},{"name":"procd-seccomp","version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.13~58eb263d","type":"application","name":"procd-ujail"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"11","type":"application","name":"px5g-mbedtls"},{"name":"rpcd","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","name":"rpcd-mod-file"},{"name":"rpcd-mod-iwinfo","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"name":"rpcd-mod-luci","version":"20240305","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library"},{"type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-rpcsys"},{"name":"rpcd-mod-rrdns","version":"20170710","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library"},{"type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode"},{"name":"ubox","type":"application","version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"ubus","type":"application","version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"type":"application","version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"ubusd"},{"type":"application","version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"uci"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","name":"uclient-fetch"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode"},{"name":"ucode-mod-fs","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"type":"application","version":"1","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-html"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-log"},{"name":"ucode-mod-math","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"ucode-mod-ubus"},{"name":"ucode-mod-uci","type":"application","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","type":"application","name":"ucode-mod-uclient"},{"name":"ucode-mod-uloop","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"name":"uhttpd","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.10.03~ebb92e6b"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.10.03~ebb92e6b","type":"application","name":"uhttpd-mod-ubus"},{"version":"3","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"urandom-seed"},{"name":"usign","version":"2025.10.03~c4c72b1b","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"cpe":"cpe:/a:zlib:zlib:1.3.1","version":"1.3.1","licenses":[{"license":{"name":"Zlib"}}],"type":"library","name":"zlib"}],"version":1,"bomFormat":"CycloneDX","serialNumber":"urn:uuid:1cbd5f04-2342-41fb-a1ee-044dc34c35a0"}