{"metadata":{"timestamp":"2026-09-22T22:09:39Z"},"version":1,"bomFormat":"CycloneDX","serialNumber":"urn:uuid:72e53cce-80e3-4341-8a44-da7ca9a5310e","specVersion":"1.4","components":[{"version":"3.0.5","name":"apk-mbedtls","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"attendedsysupgrade-common","version":"10"},{"version":"1717~e73b5f91a3","name":"base-files","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"name":"busybox","version":"1.37.0","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:busybox:busybox:1.37.0"},{"version":"20260601","name":"ca-bundle","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"type":"application"},{"name":"cgi-io","version":"2026.07.21~31cb3c89","type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"version":"2.93","name":"dnsmasq","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","cpe":"cpe:/a:thekelleys:dnsmasq:2.93"},{"version":"2025.89","name":"dropbear","cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","licenses":[{"license":{"name":"MIT"}}],"type":"application"},{"name":"firewall4","version":"2025.03.17~b6e51575","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2025.10","name":"fit-check-sign","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"GPL-2.0+"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"2","name":"fitblk"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"fstools","version":"2026.05.23~16718b6e"},{"name":"fwtool","version":"2025.10.03~04cd252e","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"getrandom","version":"2025.10.30~6f78fa49","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"library","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:jansson_project:jansson:2.14.1","name":"jansson","version":"2.14.1"},{"version":"2026.06.19~7dd12784","name":"jshn","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.03.16~b9034210","name":"jsonfilter"},{"type":"operating-system","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kernel","version":"6.12.108"},{"name":"kmod-crypto-crc32c","version":"6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108"},{"name":"kmod-crypto-hash","version":"6.12.108","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-gpio-button-hotplug","version":"6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"kmod-lib-crc-ccitt","version":"6.12.108","cpe":"cpe:/o:linux:linux_kernel:6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-lib-crc32c","version":"6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nf-conntrack","version":"6.12.108"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108","name":"kmod-nf-conntrack6"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108","name":"kmod-nf-flow"},{"version":"6.12.108","name":"kmod-nf-log","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108"},{"version":"6.12.108","name":"kmod-nf-log6","cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108","name":"kmod-nf-nat"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nf-reject","version":"6.12.108"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nf-reject6","version":"6.12.108"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108","name":"kmod-nfnetlink"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108","name":"kmod-nft-core"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108","name":"kmod-nft-fib"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-nft-nat","version":"6.12.108"},{"name":"kmod-nft-offload","version":"6.12.108","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-ppp","version":"6.12.108"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.108","name":"kmod-pppoe","version":"6.12.108"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.108","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.108","name":"kmod-pppox"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.108","version":"6.12.108","name":"kmod-slhc"},{"version":"2026.06.19~7dd12784","name":"libblobmsg-json","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libc","version":"1.2.5"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","version":"14.3.0","name":"libgcc"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libiwinfo-data","version":"2026.01.14~f5dd57a8"},{"version":"2026.01.14~f5dd57a8","name":"libiwinfo","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"type":"library","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:json-c:json-c:0.18","name":"libjson-c","version":"0.18"},{"version":"2026.06.19~7dd12784","name":"libjson-script","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2023.03.15~9b5b683f","name":"liblucihttp-ucode"},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2023.03.15~9b5b683f","name":"liblucihttp"},{"cpe":"cpe:/a:arm:mbed_tls:3.6.7","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library","version":"3.6.7","name":"libmbedtls"},{"name":"libmnl","version":"1.0.5","cpe":"cpe:/a:netfilter:libmnl:1.0.5","type":"library","licenses":[{"license":{"name":"LGPL-2.1+"}}]},{"name":"libnftnl","version":"1.3.1","type":"library","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:netfilter:libnftnl:1.3.1"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"libnl-tiny","version":"2025.12.02~40493a65"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libubox","version":"2026.06.19~7dd12784"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","version":"2026.06.28~24864e78","name":"libubus"},{"version":"2025.12.02~66127cd7","name":"libuci","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library"},{"name":"libuclient","version":"2026.06.07~daad21fa","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","name":"libucode","licenses":[{"license":{"name":"ISC"}}],"type":"library"},{"type":"library","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libudebug","version":"2026.01.16~875e1a7a"},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2026.03.01~99f1c0db","name":"libustream-mbedtls"},{"name":"logd","version":"2025.10.30~6f78fa49","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.263.44884~0834d09","name":"luci"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"luci-app-attendedsysupgrade","version":"26.263.44884~0834d09"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-app-firewall","version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","name":"luci-app-package-manager","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"name":"luci-base","version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"MIT"}}],"name":"luci-lib-uqr","version":"26.263.44884~0834d09"},{"version":"26.263.44884~0834d09","name":"luci-light","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.263.44884~0834d09","name":"luci-mod-admin-full"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-network","version":"26.263.44884~0834d09"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.263.44884~0834d09","name":"luci-mod-status"},{"version":"26.263.44884~0834d09","name":"luci-mod-system","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"name":"luci-proto-ipv6","version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-proto-ppp","version":"26.263.44884~0834d09","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-ssl","version":"26.263.44884~0834d09"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.263.44884~0834d09","name":"luci-theme-bootstrap"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0+"}}],"name":"mtd","version":"27"},{"version":"2026.02.26~cbb83a18","name":"netifd","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"nftables-json","version":"1.1.6"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.06.20~07d324ee","name":"odhcp6c"},{"name":"odhcpd-ipv6only","version":"2026.06.29~5d7be43f","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"openwrt-keyring","version":"2025.12.10~f0670054","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"2026.08.30~9b51eeec","name":"owut"},{"name":"ppp","version":"2.5.2","type":"application","licenses":[{"license":{"name":"BSD-4-Clause"}}],"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2"},{"version":"2.5.2","name":"ppp-mod-pppoe","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}],"type":"application"},{"name":"procd","version":"2026.03.13~58eb263d","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-ujail","version":"2026.03.13~58eb263d"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","version":"11","name":"px5g-mbedtls"},{"version":"2026.07.19~e37ed9d8","name":"rpcd","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.07.19~e37ed9d8","name":"rpcd-mod-file"},{"name":"rpcd-mod-iwinfo","version":"2026.07.19~e37ed9d8","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","version":"20240305","name":"rpcd-mod-luci"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-rpcsys","version":"2026.07.19~e37ed9d8"},{"type":"library","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"rpcd-mod-rrdns","version":"20170710"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode","version":"2026.07.19~e37ed9d8"},{"version":"2.3.0","name":"ubi-utils","cpe":"cpe:/a:mtd-utils_project:mtd-utils:2.3.0","licenses":[{"license":{"name":"GPLv2"}}],"type":"application"},{"version":"2025.10","name":"uboot-envtools","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"GPL-2.0+"}}],"type":"application"},{"version":"2025.10.30~6f78fa49","name":"ubox","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"name":"ubus","version":"2026.06.28~24864e78","type":"application","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"name":"ubusd","version":"2026.06.28~24864e78","type":"application","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"version":"2025.12.02~66127cd7","name":"uci","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"uclient-fetch","version":"2026.06.07~daad21fa"},{"name":"ucode","version":"2026.01.16~85922056","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-fs","version":"2026.01.16~85922056"},{"version":"1","name":"ucode-mod-html","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode-mod-log"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-math","version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode-mod-ubus"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci","version":"2026.01.16~85922056"},{"name":"ucode-mod-uclient","version":"2026.06.07~daad21fa","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","name":"ucode-mod-uloop","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"name":"uhttpd","version":"2026.06.16~7b1bec45","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.06.16~7b1bec45","name":"uhttpd-mod-ubus"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"3","name":"urandom-seed"},{"name":"urngd","version":"2025.10.03~f17e33d9","type":"application","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}]},{"name":"usign","version":"2025.10.03~c4c72b1b","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"cpe":"cpe:/a:zlib:zlib:1.3.1","type":"library","licenses":[{"license":{"name":"Zlib"}}],"name":"zlib","version":"1.3.1"}]}