{"metadata":{"timestamp":"2026-05-08T10:23:15Z"},"version":1,"bomFormat":"CycloneDX","specVersion":"1.4","serialNumber":"urn:uuid:1ddb8999-7bcc-4104-be0d-a8e30c7c7a15","components":[{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"apk-mbedtls","version":"3.0.5"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"10","name":"attendedsysupgrade-common","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"base-files","type":"application","version":"1706~0bcdcf67d7"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:busybox:busybox:1.37.0","name":"busybox","type":"application","version":"1.37.0"},{"version":"20260223","name":"ca-bundle","type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}]},{"version":"2025.12.11~658b14bd","type":"application","name":"cgi-io","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"name":"dnsmasq","type":"application","version":"2.91","cpe":"cpe:/a:thekelleys:dnsmasq:2.91","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","type":"application","name":"dropbear","version":"2025.89"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.47.3","name":"e2fsprogs","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"firewall4","version":"2025.03.17~b6e51575"},{"type":"application","name":"fstools","version":"2026.02.15~8d377aa6","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2025.10.03~04cd252e","type":"application","name":"fwtool","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"getrandom","version":"2025.10.30~6f78fa49"},{"licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:jansson_project:jansson:2.14.1","name":"jansson","type":"library","version":"2.14.1"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","name":"jshn","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"jsonfilter","version":"2026.03.16~b9034210"},{"version":"6.12.85","type":"operating-system","name":"kernel","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"version":"6.12.85","name":"kmod-crypto-crc32c","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-crypto-hash","type":"application","version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-lib-crc-ccitt","type":"application","version":"6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","name":"kmod-lib-crc32c","type":"application"},{"version":"6.12.85","name":"kmod-nf-conntrack","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"name":"kmod-nf-conntrack6","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nf-flow","type":"application","version":"6.12.85"},{"type":"application","name":"kmod-nf-log","version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","type":"application","name":"kmod-nf-log6"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nf-nat","version":"6.12.85"},{"name":"kmod-nf-reject","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-nf-reject6","type":"application","version":"6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","name":"kmod-nfnetlink","type":"application"},{"version":"6.12.85","type":"application","name":"kmod-nft-core","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-nft-fib"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","type":"application","name":"kmod-nft-nat","version":"6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","name":"kmod-nft-offload","type":"application"},{"version":"6.12.85","name":"kmod-nls-base","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-ppp","type":"application","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-pppoe","type":"application","version":"6.12.85"},{"type":"application","name":"kmod-pppox","version":"6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-scsi-core","type":"application","version":"6.12.85"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-slhc"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-usb-common","type":"application","version":"6.12.85"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","type":"application","name":"kmod-usb-core"},{"type":"application","name":"kmod-usb-dwc3","version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","version":"6.12.85","type":"application","name":"kmod-usb-roles"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.85","type":"application","name":"kmod-usb-storage"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.85","name":"kmod-usb-xhci-hcd","type":"application","version":"6.12.85"},{"name":"kmod-usb3","type":"application","version":"6.12.85","cpe":"cpe:/o:linux:linux_kernel:6.12.85","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"type":"library","name":"libblkid","version":"2.41.3"},{"version":"2026.03.13~81563384","type":"library","name":"libblobmsg-json","licenses":[{"license":{"name":"ISC"}}]},{"version":"1.2.5","name":"libc","type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","version":"1.47.3","name":"libcomerr","type":"library"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","name":"libe2p","type":"library","version":"1.47.3"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.47.3","name":"libext2fs","type":"library"},{"name":"libf2fs","type":"library","version":"1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libgcc","type":"application","version":"14.3.0"},{"name":"libiwinfo-data","type":"application","version":"2026.01.14~f5dd57a8","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","type":"library","name":"libiwinfo"},{"licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:json-c:json-c:0.18","type":"library","name":"libjson-c","version":"0.18"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","type":"application","name":"libjson-script"},{"name":"liblucihttp-ucode","type":"library","version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2023.03.15~9b5b683f","name":"liblucihttp","type":"library"},{"version":"3.6.6","name":"libmbedtls","type":"library","cpe":"cpe:/a:arm:mbed_tls:3.6.6","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"cpe":"cpe:/a:netfilter:libmnl:1.0.5","licenses":[{"license":{"name":"LGPL-2.1+"}}],"type":"library","name":"libmnl","version":"1.0.5"},{"type":"library","name":"libnftnl","version":"1.3.1","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:netfilter:libnftnl:1.3.1"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~40493a65","type":"library","name":"libnl-tiny"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","name":"libpthread","type":"application"},{"version":"1.2.5","name":"librt","type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3","name":"libsmartcols","type":"library","version":"2.41.3"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.47.3","name":"libss","type":"library"},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","name":"libubox","version":"2026.03.13~81563384"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1","name":"libubus","type":"library"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","name":"libuci","version":"2025.12.02~66127cd7"},{"version":"2026.02.20~7a0aa2e4","name":"libuclient","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","type":"library","name":"libucode","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library","name":"libudebug","version":"2026.01.16~875e1a7a"},{"version":"2026.03.01~99f1c0db","type":"library","name":"libustream-mbedtls","licenses":[{"license":{"name":"ISC"}}]},{"type":"library","name":"libuuid","version":"2.41.3","cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"BSD-3-Clause"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"logd","type":"application","version":"2025.10.30~6f78fa49"},{"version":"26.128.23199~e5f2fb1","name":"luci","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"luci-app-attendedsysupgrade","version":"26.128.23199~e5f2fb1"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.128.23199~e5f2fb1","type":"application","name":"luci-app-firewall"},{"name":"luci-app-package-manager","type":"application","version":"26.128.23199~e5f2fb1","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-base","type":"application","version":"26.128.23199~e5f2fb1"},{"version":"26.128.23199~e5f2fb1","name":"luci-lib-uqr","type":"application","licenses":[{"license":{"name":"MIT"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.128.23199~e5f2fb1","name":"luci-light","type":"application"},{"version":"26.128.23199~e5f2fb1","name":"luci-mod-admin-full","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.128.23199~e5f2fb1","name":"luci-mod-network","type":"application"},{"name":"luci-mod-status","type":"application","version":"26.128.23199~e5f2fb1","licenses":[{"license":{"name":"Apache-2.0"}}]},{"version":"26.128.23199~e5f2fb1","type":"application","name":"luci-mod-system","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.128.23199~e5f2fb1","type":"application","name":"luci-proto-ipv6"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-proto-ppp","version":"26.128.23199~e5f2fb1"},{"version":"26.128.23199~e5f2fb1","name":"luci-ssl","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-theme-bootstrap","type":"application","version":"26.128.23199~e5f2fb1","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"mkf2fs","type":"application","version":"1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0"},{"type":"application","name":"mtd","version":"27","licenses":[{"license":{"name":"GPL-2.0+"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.26~cbb83a18","type":"application","name":"netifd"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"nftables-json","version":"1.1.6"},{"name":"odhcp6c","type":"application","version":"2026.01.25~ee2949e3","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"odhcpd-ipv6only","type":"application","version":"2026.03.16~edf2e523","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"openwrt-keyring","type":"application","version":"2025.12.10~f0670054","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"owut","type":"application","version":"2026.04.09~5d6760b5"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3","type":"application","name":"partx-utils","version":"2.41.3"},{"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}],"name":"ppp","type":"application","version":"2.5.2"},{"version":"2.5.2","type":"application","name":"ppp-mod-pppoe","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd","type":"application","version":"2026.03.13~58eb263d"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd-seccomp","version":"2026.03.13~58eb263d"},{"type":"application","name":"procd-ujail","version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","name":"px5g-mbedtls","version":"11","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"rpcd","version":"2025.12.03~ffb9961c"},{"version":"2025.12.03~ffb9961c","name":"rpcd-mod-file","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-iwinfo","type":"application","version":"2025.12.03~ffb9961c"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","name":"rpcd-mod-luci","version":"20240305"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application","name":"rpcd-mod-rpcsys"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"rpcd-mod-rrdns","type":"library","version":"20170710"},{"name":"rpcd-mod-ucode","type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"name":"ubi-utils","type":"application","version":"2.3.0","licenses":[{"license":{"name":"GPLv2"}}],"cpe":"cpe:/a:mtd-utils_project:mtd-utils:2.3.0"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","name":"ubox","type":"application"},{"name":"ubus","type":"application","version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"ubusd","type":"application","version":"2025.12.02~3cc98db1"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"uci","type":"application","version":"2025.12.02~66127cd7"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","type":"application","name":"uclient-fetch"},{"version":"2026.01.16~85922056","type":"application","name":"ucode","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","name":"ucode-mod-fs","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"1","name":"ucode-mod-html","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-log","type":"application"},{"version":"2026.01.16~85922056","name":"ucode-mod-math","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-ubus","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-uci","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"ucode-mod-uclient","version":"2026.02.20~7a0aa2e4"},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uloop","type":"application","version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"name":"uhttpd","type":"application","version":"2025.10.03~ebb92e6b"},{"version":"2025.10.03~ebb92e6b","name":"uhttpd-mod-ubus","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"name":"urandom-seed","type":"application","version":"3","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"2025.10.03~f17e33d9","type":"application","name":"urngd","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}]},{"licenses":[{"license":{"name":"ISC"}}],"name":"usign","type":"application","version":"2025.10.03~c4c72b1b"},{"licenses":[{"license":{"name":"Zlib"}}],"cpe":"cpe:/a:zlib:zlib:1.3.1","version":"1.3.1","type":"library","name":"zlib"}]}