{"version":1,"metadata":{"timestamp":"2026-05-16T12:52:03Z"},"specVersion":"1.4","components":[{"version":"3.0.5","name":"apk-mbedtls","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"version":"10","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"attendedsysupgrade-common"},{"version":"1708~13ff2256e5","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"base-files"},{"licenses":[{"license":{"name":"GPL-2.0+"}}],"name":"br2684ctl","cpe":"cpe:/a:linux-atm:linux-atm:2.5.2","type":"application","version":"2.5.2"},{"cpe":"cpe:/a:daemonology:bsdiff:4.3","name":"bspatch","licenses":[{"license":{"name":"BSD-2-Clause"}}],"type":"application","version":"4.3"},{"cpe":"cpe:/a:busybox:busybox:1.37.0","name":"busybox","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"1.37.0"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"name":"ca-bundle","version":"20260223"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"name":"cgi-io","type":"application","version":"2025.12.11~658b14bd"},{"version":"2.91","cpe":"cpe:/a:thekelleys:dnsmasq:2.91","name":"dnsmasq","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"version":"2025.89","type":"application","name":"dropbear","cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","licenses":[{"license":{"name":"MIT"}}]},{"version":"05.08.01.08.01.06.05.08.00.11.01.01","type":"firmware","name":"dsl-vrx200-firmware-xdsl-a"},{"name":"dsl-vrx200-firmware-xdsl-b-patch","type":"firmware","version":"05.08.01.08.01.06.05.08.00.11.01.01"},{"version":"2025.03.17~b6e51575","name":"firewall4","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2026.02.15~8d377aa6","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"fstools","type":"application"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"fwtool","version":"2025.10.03~04cd252e"},{"version":"2025.10.30~6f78fa49","name":"getrandom","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"type":"library","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:jansson_project:jansson:2.14.1","name":"jansson","version":"2.14.1"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"jshn","version":"2026.03.13~81563384"},{"version":"2026.03.16~b9034210","licenses":[{"license":{"name":"ISC"}}],"name":"jsonfilter","type":"application"},{"version":"6.12.87","type":"operating-system","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"kernel","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-atm"},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-crypto-aead","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-crc32c"},{"type":"application","name":"kmod-crypto-des","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"type":"application","name":"kmod-crypto-hash","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-manager","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"version":"6.12.87","type":"application","name":"kmod-crypto-null","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-dsa-gswip","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"kmod-gpio-button-hotplug","type":"application"},{"type":"application","name":"kmod-leds-gpio","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-lib-crc-ccitt","version":"6.12.87"},{"version":"6.12.87","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-lib-crc32c","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"6.12.87","type":"application","name":"kmod-ltq-atm-vr9","licenses":[{"license":{"name":"GPL-2.0+"}}]},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0+"}}],"name":"kmod-ltq-deu-vr9","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-2-Clause"}}],"name":"kmod-ltq-ifxos","type":"application"},{"version":"6.12.87","type":"application","name":"kmod-ltq-ptm-vr9","licenses":[{"license":{"name":"GPL-2.0+"}}]},{"version":"6.12.87","type":"application","name":"kmod-ltq-vdsl-vr9","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-2-Clause"}}]},{"version":"6.12.87","name":"kmod-ltq-vdsl-vr9-mei","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-2-Clause"}}],"type":"application"},{"type":"application","name":"kmod-ltq-vectoring","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-2-Clause"}}],"version":"6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-conntrack","type":"application","version":"6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-conntrack6","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","version":"6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-flow","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-log","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-log6","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application"},{"version":"6.12.87","type":"application","name":"kmod-nf-nat","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-reject"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-reject6","type":"application","version":"6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nfnetlink","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nft-core","type":"application"},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nft-fib","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nft-nat","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nft-offload","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-ppp","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-pppoa","type":"application","version":"6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-pppoe","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application"},{"version":"6.12.87","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-pppox","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-slhc","type":"application","version":"6.12.87"},{"version":"2026.03.13~81563384","type":"library","name":"libblobmsg-json","licenses":[{"license":{"name":"ISC"}}]},{"version":"1.2.5","name":"libc","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application"},{"version":"14.3.0","type":"application","name":"libgcc","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libiwinfo-data","type":"application","version":"2026.01.14~f5dd57a8"},{"version":"2026.01.14~f5dd57a8","type":"library","name":"libiwinfo","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"0.18","type":"library","name":"libjson-c","cpe":"cpe:/a:json-c:json-c:0.18","licenses":[{"license":{"name":"MIT"}}]},{"type":"application","name":"libjson-script","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384"},{"name":"liblucihttp-ucode","licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2023.03.15~9b5b683f"},{"licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp","type":"library","version":"2023.03.15~9b5b683f"},{"type":"library","name":"libmbedtls","cpe":"cpe:/a:arm:mbed_tls:3.6.6","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"3.6.6"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1+"}}],"cpe":"cpe:/a:netfilter:libmnl:1.0.5","name":"libmnl","version":"1.0.5"},{"version":"1.3.1","cpe":"cpe:/a:netfilter:libnftnl:1.3.1","name":"libnftnl","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library"},{"version":"2025.12.02~40493a65","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"libnl-tiny","type":"library"},{"version":"1.2.5","type":"application","name":"libpthread","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"version":"1.2.5","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"librt","type":"application"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libubox","version":"2026.03.13~81563384"},{"type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"libubus","version":"2025.12.02~3cc98db1"},{"version":"2025.12.02~66127cd7","name":"libuci","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library"},{"name":"libuclient","licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2026.02.20~7a0aa2e4"},{"version":"2026.01.16~85922056","type":"library","name":"libucode","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~875e1a7a","type":"library","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libudebug"},{"type":"library","licenses":[{"license":{"name":"ISC"}}],"name":"libustream-mbedtls","version":"2026.03.01~99f1c0db"},{"version":"2.5.2","cpe":"cpe:/a:linux-atm:linux-atm:2.5.2","name":"linux-atm","licenses":[{"license":{"name":"GPL-2.0+"}}],"type":"library"},{"name":"logd","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2025.10.30~6f78fa49"},{"name":"ltq-dsl-base","type":"application","version":"3"},{"version":"4.17.18.6","licenses":[{"license":{"name":"BSD-2-Clause"}}],"name":"ltq-vdsl-vr9-app","type":"application"},{"version":"6.8.6","name":"ltq-vdsl-vr9-vectoring-fw-installer","type":"application"},{"version":"26.134.75701~cd18b8e","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci"},{"version":"26.134.75701~cd18b8e","type":"application","name":"luci-app-attendedsysupgrade","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"26.134.75701~cd18b8e","type":"application","name":"luci-app-firewall","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-app-package-manager","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.134.75701~cd18b8e"},{"type":"application","name":"luci-base","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.134.75701~cd18b8e"},{"name":"luci-lib-uqr","licenses":[{"license":{"name":"MIT"}}],"type":"application","version":"26.134.75701~cd18b8e"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-light","type":"application","version":"26.134.75701~cd18b8e"},{"name":"luci-mod-admin-full","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.134.75701~cd18b8e"},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-network","version":"26.134.75701~cd18b8e"},{"version":"26.134.75701~cd18b8e","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-mod-status","type":"application"},{"version":"26.134.75701~cd18b8e","type":"application","name":"luci-mod-system","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-proto-ipv6","type":"application","version":"26.134.75701~cd18b8e"},{"version":"26.134.75701~cd18b8e","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-proto-ppp"},{"version":"26.134.75701~cd18b8e","type":"application","name":"luci-ssl","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-theme-bootstrap","version":"26.134.75701~cd18b8e"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0+"}}],"name":"mtd","version":"27"},{"name":"netifd","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.02.26~cbb83a18"},{"name":"nftables-json","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"1.1.6"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcp6c","version":"2026.01.25~ee2949e3"},{"type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcpd-ipv6only","version":"2026.03.16~edf2e523"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"openwrt-keyring","type":"application","version":"2025.12.10~f0670054"},{"name":"owut","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"2026.04.09~5d6760b5"},{"version":"2.5.2","type":"application","licenses":[{"license":{"name":"BSD-4-Clause"}}],"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","name":"ppp"},{"version":"2.5.2","type":"application","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","name":"ppp-mod-pppoa","licenses":[{"license":{"name":"BSD-4-Clause"}}]},{"version":"2.5.2","type":"application","name":"ppp-mod-pppoe","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}]},{"version":"2026.03.13~58eb263d","name":"procd","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-seccomp","type":"application","version":"2026.03.13~58eb263d"},{"name":"procd-ujail","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.03.13~58eb263d"},{"type":"application","name":"px5g-mbedtls","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"11"},{"name":"rpcd","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2025.12.03~ffb9961c"},{"type":"application","name":"rpcd-mod-file","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c"},{"version":"2025.12.03~ffb9961c","name":"rpcd-mod-iwinfo","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"20240305","name":"rpcd-mod-luci","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library"},{"name":"rpcd-mod-rpcsys","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2025.12.03~ffb9961c"},{"version":"20170710","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"rpcd-mod-rrdns","type":"library"},{"version":"2025.12.03~ffb9961c","type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode"},{"type":"application","licenses":[{"license":{"name":"GPLv2"}}],"name":"ubi-utils","cpe":"cpe:/a:mtd-utils_project:mtd-utils:2.3.0","version":"2.3.0"},{"type":"application","name":"ubox","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49"},{"version":"2025.12.02~3cc98db1","name":"ubus","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application"},{"type":"application","name":"ubusd","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1"},{"version":"2025.12.02~66127cd7","type":"application","name":"uci","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}],"name":"uclient-fetch","type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode","version":"2026.01.16~85922056"},{"type":"application","name":"ucode-mod-fs","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"version":"1","name":"ucode-mod-html","licenses":[{"license":{"name":"ISC"}}],"type":"application"},{"version":"2026.01.16~85922056","type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-log"},{"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-math","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-ubus","type":"application"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci","version":"2026.01.16~85922056"},{"version":"2026.02.20~7a0aa2e4","type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uclient"},{"type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uloop","version":"2026.01.16~85922056"},{"name":"uhttpd","licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2025.10.03~ebb92e6b"},{"version":"2025.10.03~ebb92e6b","type":"application","licenses":[{"license":{"name":"ISC"}}],"name":"uhttpd-mod-ubus"},{"name":"urandom-seed","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"3"},{"name":"urngd","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}],"type":"application","version":"2025.10.03~f17e33d9"},{"version":"2025.10.03~c4c72b1b","licenses":[{"license":{"name":"ISC"}}],"name":"usign","type":"application"},{"licenses":[{"license":{"name":"Zlib"}}],"cpe":"cpe:/a:zlib:zlib:1.3.1","name":"zlib","type":"library","version":"1.3.1"}],"bomFormat":"CycloneDX","serialNumber":"urn:uuid:9d7ab0cc-d439-43ba-a13f-d1913b3100f0"}