{"version":1,"metadata":{"timestamp":"2026-05-05T21:20:12Z"},"serialNumber":"urn:uuid:1c6b43a9-459a-41e9-9992-401e77a356e2","specVersion":"1.4","components":[{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"3.0.5","name":"apk-mbedtls","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"attendedsysupgrade-common","version":"10","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1705~6639b15f62","name":"base-files","type":"application"},{"cpe":"cpe:/a:busybox:busybox:1.37.0","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.37.0","name":"busybox","type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"name":"ca-bundle","version":"20260223"},{"type":"application","version":"2025.12.11~658b14bd","name":"cgi-io","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2.91","name":"dnsmasq","cpe":"cpe:/a:thekelleys:dnsmasq:2.91"},{"cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","type":"application","version":"2025.89","name":"dropbear","licenses":[{"license":{"name":"MIT"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.03.17~b6e51575","name":"firewall4","type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"GPL-2.0+"}}],"version":"2025.10","name":"fit-check-sign"},{"type":"application","version":"2","name":"fitblk","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.15~8d377aa6","name":"fstools"},{"type":"application","version":"2025.10.03~04cd252e","name":"fwtool","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","name":"getrandom"},{"cpe":"cpe:/a:jansson_project:jansson:2.14.1","licenses":[{"license":{"name":"MIT"}}],"version":"2.14.1","name":"jansson","type":"library"},{"name":"jshn","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"jsonfilter","version":"2026.03.16~b9034210"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"operating-system","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"kernel","version":"6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-crypto-crc32c","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-crypto-hash","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"type":"application","version":"6.12.85","name":"kmod-gpio-button-hotplug","licenses":[{"license":{"name":"GPL-2.0"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","name":"kmod-lib-crc-ccitt","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-lib-crc32c","type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","name":"kmod-nf-conntrack","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-conntrack6","type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-flow","version":"6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-log","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-log6","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","name":"kmod-nf-nat","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-reject"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nf-reject6","type":"application"},{"name":"kmod-nfnetlink","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"type":"application","version":"6.12.85","name":"kmod-nft-core","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nft-fib","version":"6.12.85","type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-nft-nat","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","version":"6.12.85","name":"kmod-nft-offload","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","name":"kmod-ppp","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-pppoe","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","name":"kmod-pppox","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","name":"kmod-slhc","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","name":"libblobmsg-json"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","name":"libc","type":"application"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"14.3.0","name":"libgcc","type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","name":"libiwinfo-data"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","name":"libiwinfo","type":"library"},{"licenses":[{"license":{"name":"MIT"}}],"version":"0.18","name":"libjson-c","type":"library","cpe":"cpe:/a:json-c:json-c:0.18"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","name":"libjson-script"},{"name":"liblucihttp-ucode","version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp","version":"2023.03.15~9b5b683f","type":"library"},{"cpe":"cpe:/a:arm:mbed_tls:3.6.6","type":"library","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"name":"libmbedtls","version":"3.6.6"},{"licenses":[{"license":{"name":"LGPL-2.1+"}}],"name":"libmnl","version":"1.0.5","type":"library","cpe":"cpe:/a:netfilter:libmnl:1.0.5"},{"cpe":"cpe:/a:netfilter:libnftnl:1.3.1","type":"library","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"1.3.1","name":"libnftnl"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~40493a65","name":"libnl-tiny"},{"type":"library","name":"libubox","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1","name":"libubus","type":"library"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~66127cd7","name":"libuci","type":"library"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","name":"libuclient","type":"library"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libucode","version":"2026.01.16~85922056"},{"version":"2026.01.16~875e1a7a","name":"libudebug","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"type":"library","version":"2026.03.01~99f1c0db","name":"libustream-mbedtls","licenses":[{"license":{"name":"ISC"}}]},{"name":"logd","version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-app-attendedsysupgrade","type":"application"},{"type":"application","name":"luci-app-firewall","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-app-package-manager"},{"name":"luci-base","version":"26.124.63982~650a6ca","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.124.63982~650a6ca","name":"luci-lib-uqr","licenses":[{"license":{"name":"MIT"}}],"type":"application"},{"version":"26.124.63982~650a6ca","name":"luci-light","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-admin-full","version":"26.124.63982~650a6ca"},{"type":"application","version":"26.124.63982~650a6ca","name":"luci-mod-network","licenses":[{"license":{"name":"Apache-2.0"}}]},{"version":"26.124.63982~650a6ca","name":"luci-mod-status","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-mod-system","type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-proto-ipv6","type":"application"},{"type":"application","version":"26.124.63982~650a6ca","name":"luci-proto-ppp","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-ssl"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.124.63982~650a6ca","name":"luci-theme-bootstrap"},{"version":"27","name":"mtd","licenses":[{"license":{"name":"GPL-2.0+"}}],"type":"application"},{"type":"application","version":"2026.02.26~cbb83a18","name":"netifd","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"1.1.6","name":"nftables-json","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcp6c","version":"2026.01.25~ee2949e3"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcpd-ipv6only","version":"2026.03.16~edf2e523","type":"application"},{"name":"openwrt-keyring","version":"2025.12.10~f0670054","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"owut","version":"2026.04.09~5d6760b5"},{"version":"2.5.2","name":"ppp","licenses":[{"license":{"name":"BSD-4-Clause"}}],"type":"application","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2"},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2","name":"ppp-mod-pppoe","type":"application","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2"},{"name":"procd","version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"2026.03.13~58eb263d","name":"procd-ujail","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"11","name":"px5g-mbedtls","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"type":"application","version":"2025.12.03~ffb9961c","name":"rpcd","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","name":"rpcd-mod-file","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","version":"2025.12.03~ffb9961c","name":"rpcd-mod-iwinfo","licenses":[{"license":{"name":"ISC"}}]},{"type":"library","version":"20240305","name":"rpcd-mod-luci","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-rpcsys","version":"2025.12.03~ffb9961c"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"20170710","name":"rpcd-mod-rrdns","type":"library"},{"version":"2025.12.03~ffb9961c","name":"rpcd-mod-ucode","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"GPLv2"}}],"name":"ubi-utils","version":"2.3.0","type":"application","cpe":"cpe:/a:mtd-utils_project:mtd-utils:2.3.0"},{"type":"application","version":"2025.10","name":"uboot-envtools","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"GPL-2.0+"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"ubox","version":"2025.10.30~6f78fa49","type":"application"},{"version":"2025.12.02~3cc98db1","name":"ubus","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1","name":"ubusd","type":"application"},{"type":"application","name":"uci","version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","name":"uclient-fetch","type":"application"},{"version":"2026.01.16~85922056","name":"ucode","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2026.01.16~85922056","name":"ucode-mod-fs","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"type":"application","version":"1","name":"ucode-mod-html","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-log","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-math","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-ubus","type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-uci"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","name":"ucode-mod-uclient","type":"application"},{"version":"2026.01.16~85922056","name":"ucode-mod-uloop","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"name":"uhttpd","version":"2025.10.03~ebb92e6b","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"name":"uhttpd-mod-ubus","version":"2025.10.03~ebb92e6b","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"type":"application","name":"urandom-seed","version":"3","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","name":"urngd","version":"2025.10.03~f17e33d9","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}]},{"version":"2025.10.03~c4c72b1b","name":"usign","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"Zlib"}}],"version":"1.3.1","name":"zlib","type":"library","cpe":"cpe:/a:zlib:zlib:1.3.1"}],"bomFormat":"CycloneDX"}