{"metadata":{"timestamp":"2026-09-21T17:11:57Z"},"bomFormat":"CycloneDX","version":1,"serialNumber":"urn:uuid:06d49aee-8179-4b28-af65-27ecbeda5948","specVersion":"1.4","components":[{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"apk-mbedtls","version":"3.0.5"},{"name":"attendedsysupgrade-common","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"10"},{"version":"1717~03be7efbab","name":"base-files","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"1.37.0","name":"busybox","cpe":"cpe:/a:busybox:busybox:1.37.0","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"ca-bundle","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"type":"application","version":"20260601"},{"version":"2026.07.21~31cb3c89","name":"cgi-io","type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"version":"2.93","name":"dnsmasq","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:thekelleys:dnsmasq:2.93"},{"version":"2025.89","cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","licenses":[{"license":{"name":"MIT"}}],"type":"application","name":"dropbear"},{"name":"firewall4","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.03.17~b6e51575"},{"version":"2026.05.23~16718b6e","name":"fstools","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"2025.10.03~04cd252e","name":"fwtool","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"getrandom"},{"type":"library","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:jansson_project:jansson:2.14.1","name":"jansson","version":"2.14.1"},{"version":"2026.06.19~7dd12784","name":"jshn","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"name":"jsonfilter","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.16~b9034210"},{"name":"kernel","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"operating-system","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"version":"6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-crypto-crc32c"},{"name":"kmod-crypto-hash","cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108"},{"name":"kmod-lib-crc-ccitt","cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-lib-crc32c","version":"6.12.108"},{"name":"kmod-nf-conntrack","cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108"},{"version":"6.12.108","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-conntrack6"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nf-flow","version":"6.12.108"},{"version":"6.12.108","name":"kmod-nf-log","cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nf-log6","version":"6.12.108"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-nat","version":"6.12.108"},{"version":"6.12.108","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-reject"},{"version":"6.12.108","name":"kmod-nf-reject6","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-nfnetlink","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.108"},{"name":"kmod-nft-core","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.108"},{"name":"kmod-nft-fib","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"name":"kmod-nft-nat","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"version":"6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nft-offload"},{"name":"kmod-ppp","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"name":"kmod-pppoe","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"version":"6.12.108","name":"kmod-pppox","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-slhc","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libblobmsg-json","version":"2026.06.19~7dd12784"},{"type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libc","version":"1.2.5"},{"name":"libgcc","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","version":"14.3.0"},{"version":"2026.01.14~f5dd57a8","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libiwinfo-data"},{"version":"2026.01.14~f5dd57a8","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library","name":"libiwinfo"},{"name":"libjson-c","cpe":"cpe:/a:json-c:json-c:0.18","licenses":[{"license":{"name":"MIT"}}],"type":"library","version":"0.18"},{"version":"2026.06.19~7dd12784","name":"libjson-script","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2023.03.15~9b5b683f","type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp-ucode"},{"version":"2023.03.15~9b5b683f","type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp"},{"version":"3.6.7","name":"libmbedtls","type":"library","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:arm:mbed_tls:3.6.7"},{"version":"1.0.5","cpe":"cpe:/a:netfilter:libmnl:1.0.5","licenses":[{"license":{"name":"LGPL-2.1+"}}],"type":"library","name":"libmnl"},{"version":"1.3.1","name":"libnftnl","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library","cpe":"cpe:/a:netfilter:libnftnl:1.3.1"},{"version":"2025.12.02~40493a65","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","name":"libnl-tiny"},{"name":"libubox","licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2026.06.19~7dd12784"},{"version":"2026.06.28~24864e78","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","name":"libubus"},{"version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","name":"libuci"},{"version":"2026.06.07~daad21fa","name":"libuclient","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","name":"libucode","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"version":"2026.01.16~875e1a7a","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library","name":"libudebug"},{"name":"libustream-mbedtls","type":"library","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.01~99f1c0db"},{"version":"2025.10.30~6f78fa49","name":"logd","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci","version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"luci-app-attendedsysupgrade"},{"version":"26.263.44884~0834d09","name":"luci-app-firewall","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-app-package-manager","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-base"},{"version":"26.263.44884~0834d09","licenses":[{"license":{"name":"MIT"}}],"type":"application","name":"luci-lib-uqr"},{"version":"26.263.44884~0834d09","name":"luci-light","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-mod-admin-full","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-network"},{"version":"26.263.44884~0834d09","name":"luci-mod-status","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-mod-system","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.263.44884~0834d09"},{"name":"luci-proto-ipv6","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","name":"luci-proto-ppp","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"version":"26.263.44884~0834d09","name":"luci-ssl","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-theme-bootstrap"},{"version":"27","name":"mtd","licenses":[{"license":{"name":"GPL-2.0+"}}],"type":"application"},{"name":"netifd","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.02.26~cbb83a18"},{"version":"1.1.6","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"nftables-json"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcp6c","version":"2026.06.20~07d324ee"},{"version":"2026.06.29~5d7be43f","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcpd-ipv6only"},{"version":"2025.12.10~f0670054","name":"openwrt-keyring","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"owut","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"2026.08.30~9b51eeec"},{"version":"2.5.2","name":"ppp","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}],"type":"application"},{"name":"ppp-mod-pppoe","licenses":[{"license":{"name":"BSD-4-Clause"}}],"type":"application","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","version":"2.5.2"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd"},{"version":"2026.03.13~58eb263d","name":"procd-seccomp","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd-ujail"},{"type":"application","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"px5g-mbedtls","version":"11"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"rpcd","version":"2026.07.19~e37ed9d8"},{"name":"rpcd-mod-file","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.07.19~e37ed9d8"},{"name":"rpcd-mod-iwinfo","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.07.19~e37ed9d8"},{"version":"20240305","name":"rpcd-mod-luci","type":"library","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"rpcd-mod-rpcsys","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.07.19~e37ed9d8"},{"name":"rpcd-mod-rrdns","type":"library","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"20170710"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode","version":"2026.07.19~e37ed9d8"},{"version":"2025.10.30~6f78fa49","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"ubox"},{"version":"2026.06.28~24864e78","name":"ubus","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"version":"2026.06.28~24864e78","name":"ubusd","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"name":"uci","type":"application","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~66127cd7"},{"name":"uclient-fetch","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.06.07~daad21fa"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode","version":"2026.01.16~85922056"},{"version":"2026.01.16~85922056","name":"ucode-mod-fs","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"name":"ucode-mod-html","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"1"},{"name":"ucode-mod-log","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"version":"2026.01.16~85922056","name":"ucode-mod-math","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"ucode-mod-ubus"},{"version":"2026.01.16~85922056","type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci"},{"name":"ucode-mod-uclient","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.06.07~daad21fa"},{"version":"2026.01.16~85922056","name":"ucode-mod-uloop","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2026.06.16~7b1bec45","name":"uhttpd","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"name":"uhttpd-mod-ubus","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.06.16~7b1bec45"},{"version":"3","name":"urandom-seed","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}],"name":"urngd","version":"2025.10.03~f17e33d9"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"usign","version":"2025.10.03~c4c72b1b"},{"version":"1.3.1","cpe":"cpe:/a:zlib:zlib:1.3.1","licenses":[{"license":{"name":"Zlib"}}],"type":"library","name":"zlib"}]}