{"specVersion":"1.4","bomFormat":"CycloneDX","version":1,"metadata":{"timestamp":"2026-05-16T12:55:18Z"},"serialNumber":"urn:uuid:fcecfc8a-dd26-4c65-8f8e-fa33e6183117","components":[{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"3.0.5","name":"apk-mbedtls"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"attendedsysupgrade-common","version":"10"},{"name":"base-files","version":"1708~13ff2256e5","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2025.04.30","name":"bcm27xx-gpu-fw","type":"application"},{"name":"bcm27xx-utils","version":"2025.03.14","type":"application","licenses":[{"license":{"name":"BSD-3-Clause"}}]},{"cpe":"cpe:/a:busybox:busybox:1.37.0","name":"busybox","version":"1.37.0","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"type":"application","version":"20260223","name":"ca-bundle"},{"name":"cgi-io","version":"2025.12.11~658b14bd","type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","cpe":"cpe:/a:thekelleys:dnsmasq:2.91","version":"2.91","name":"dnsmasq"},{"type":"application","licenses":[{"license":{"name":"MIT"}}],"name":"dropbear","version":"2025.89","cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","version":"1.47.3","name":"e2fsprogs","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"firewall4","version":"2025.03.17~b6e51575"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.02.15~8d377aa6","name":"fstools"},{"name":"fwtool","version":"2025.10.03~04cd252e","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"getrandom","version":"2025.10.30~6f78fa49"},{"licenses":[{"license":{"name":"MIT"}}],"type":"library","version":"2.14.1","name":"jansson","cpe":"cpe:/a:jansson_project:jansson:2.14.1"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.03.13~81563384","name":"jshn"},{"version":"2026.03.16~b9034210","name":"jsonfilter","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kernel","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"operating-system"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-crc32c","version":"6.12.87"},{"version":"6.12.87","name":"kmod-crypto-hash","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"version":"6.12.87","name":"kmod-fs-vfat","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.87","name":"kmod-hid","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.87","name":"kmod-hid-generic","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-input-core","version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-input-evdev","version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-lib-crc-ccitt","version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-lib-crc32c","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nf-conntrack"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-conntrack6","version":"6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nf-flow","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-log","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","name":"kmod-nf-log6","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-nat","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nf-reject"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-reject6","version":"6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.87","name":"kmod-nfnetlink","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nft-core","version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nft-fib","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nft-nat"},{"name":"kmod-nft-offload","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nls-base","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nls-cp437","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"version":"6.12.87","name":"kmod-nls-iso8859-1","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-nls-utf8","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"name":"kmod-ppp","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-pppoe","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"6.12.87","name":"kmod-pppox","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"version":"6.12.87","name":"kmod-slhc","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-sound-arm-bcm2835","version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-sound-core","version":"6.12.87"},{"name":"kmod-usb-common","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-usb-core","version":"6.12.87"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-usb-hid","version":"6.12.87"},{"name":"libblkid","version":"2.41.3","cpe":"cpe:/a:kernel:util-linux:2.41.3","type":"library","licenses":[{"license":{"name":"LGPL-2.1-or-later"}}]},{"name":"libblobmsg-json","version":"2026.03.13~81563384","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","version":"1.2.5","name":"libc"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","version":"1.47.3","name":"libcomerr","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"version":"1.47.3","name":"libe2p","cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"version":"1.47.3","name":"libext2fs","cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library"},{"type":"library","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"libf2fs","version":"1.16.0","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0"},{"type":"library","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/a:dtc_project:dtc:1.7.2","name":"libfdt","version":"1.7.2"},{"version":"14.3.0","name":"libgcc","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.01.14~f5dd57a8","name":"libiwinfo-data"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"library","version":"2026.01.14~f5dd57a8","name":"libiwinfo"},{"name":"libjson-c","version":"0.18","cpe":"cpe:/a:json-c:json-c:0.18","type":"library","licenses":[{"license":{"name":"MIT"}}]},{"name":"libjson-script","version":"2026.03.13~81563384","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2023.03.15~9b5b683f","name":"liblucihttp-ucode"},{"name":"liblucihttp","version":"2023.03.15~9b5b683f","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library","cpe":"cpe:/a:arm:mbed_tls:3.6.6","version":"3.6.6","name":"libmbedtls"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1+"}}],"name":"libmnl","version":"1.0.5","cpe":"cpe:/a:netfilter:libmnl:1.0.5"},{"name":"libnftnl","version":"1.3.1","cpe":"cpe:/a:netfilter:libnftnl:1.3.1","type":"library","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","version":"2025.12.02~40493a65","name":"libnl-tiny"},{"version":"1.2.5","name":"libpthread","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application"},{"name":"librt","version":"1.2.5","type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"type":"library","version":"2.41.3","name":"libsmartcols","cpe":"cpe:/a:kernel:util-linux:2.41.3"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","name":"libss","version":"1.47.3","type":"library","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2026.03.13~81563384","name":"libubox"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","version":"2025.12.02~3cc98db1","name":"libubus"},{"name":"libuci","version":"2025.12.02~66127cd7","type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libuclient","version":"2026.02.20~7a0aa2e4"},{"name":"libucode","version":"2026.01.16~85922056","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"name":"libudebug","version":"2026.01.16~875e1a7a","type":"library","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"libustream-mbedtls","version":"2026.03.01~99f1c0db","type":"library","licenses":[{"license":{"name":"ISC"}}]},{"version":"2.41.3","name":"libuuid","cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"BSD-3-Clause"}}],"type":"library"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2025.10.30~6f78fa49","name":"logd"},{"version":"26.134.75701~cd18b8e","name":"luci","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.134.75701~cd18b8e","name":"luci-app-attendedsysupgrade","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.134.75701~cd18b8e","name":"luci-app-firewall"},{"version":"26.134.75701~cd18b8e","name":"luci-app-package-manager","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"version":"26.134.75701~cd18b8e","name":"luci-base","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"MIT"}}],"name":"luci-lib-uqr","version":"26.134.75701~cd18b8e"},{"version":"26.134.75701~cd18b8e","name":"luci-light","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-admin-full","version":"26.134.75701~cd18b8e"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-network","version":"26.134.75701~cd18b8e"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-status","version":"26.134.75701~cd18b8e"},{"name":"luci-mod-system","version":"26.134.75701~cd18b8e","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.134.75701~cd18b8e","name":"luci-proto-ipv6"},{"name":"luci-proto-ppp","version":"26.134.75701~cd18b8e","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-ssl","version":"26.134.75701~cd18b8e","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-theme-bootstrap","version":"26.134.75701~cd18b8e"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"mkf2fs","version":"1.16.0","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0"},{"licenses":[{"license":{"name":"GPL-2.0+"}}],"type":"application","version":"27","name":"mtd"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"netifd","version":"2026.02.26~cbb83a18"},{"version":"1.1.6","name":"nftables-json","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.01.25~ee2949e3","name":"odhcp6c"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcpd-ipv6only","version":"2026.03.16~edf2e523"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2025.12.10~f0670054","name":"openwrt-keyring"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"2026.04.09~5d6760b5","name":"owut"},{"cpe":"cpe:/a:kernel:util-linux:2.41.3","version":"2.41.3","name":"partx-utils","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"application"},{"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","version":"2.5.2","name":"ppp","licenses":[{"license":{"name":"BSD-4-Clause"}}],"type":"application"},{"name":"ppp-mod-pppoe","version":"2.5.2","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","type":"application","licenses":[{"license":{"name":"BSD-4-Clause"}}]},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd","version":"2026.03.13~58eb263d"},{"version":"2026.03.13~58eb263d","name":"procd-seccomp","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-ujail","version":"2026.03.13~58eb263d"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","version":"11","name":"px5g-mbedtls"},{"name":"rpcd","version":"2025.12.03~ffb9961c","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2025.12.03~ffb9961c","name":"rpcd-mod-file","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2025.12.03~ffb9961c","name":"rpcd-mod-iwinfo"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","version":"20240305","name":"rpcd-mod-luci"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2025.12.03~ffb9961c","name":"rpcd-mod-rpcsys"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","version":"20170710","name":"rpcd-mod-rrdns"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode","version":"2025.12.03~ffb9961c"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"ubox","version":"2025.10.30~6f78fa49"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","version":"2025.12.02~3cc98db1","name":"ubus"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","version":"2025.12.02~3cc98db1","name":"ubusd"},{"type":"application","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"uci","version":"2025.12.02~66127cd7"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.02.20~7a0aa2e4","name":"uclient-fetch"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-fs","version":"2026.01.16~85922056"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-html","version":"1"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode-mod-log"},{"name":"ucode-mod-math","version":"2026.01.16~85922056","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode-mod-ubus"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci","version":"2026.01.16~85922056"},{"name":"ucode-mod-uclient","version":"2026.02.20~7a0aa2e4","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uloop","version":"2026.01.16~85922056"},{"name":"uhttpd","version":"2025.10.03~ebb92e6b","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"version":"2025.10.03~ebb92e6b","name":"uhttpd-mod-ubus","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"urandom-seed","version":"3"},{"name":"usign","version":"2025.10.03~c4c72b1b","type":"application","licenses":[{"license":{"name":"ISC"}}]},{"cpe":"cpe:/a:zlib:zlib:1.3.1","name":"zlib","version":"1.3.1","type":"library","licenses":[{"license":{"name":"Zlib"}}]}]}