{"version":1,"metadata":{"timestamp":"2026-03-18T00:00:46Z"},"specVersion":"1.4","components":[{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"apk-mbedtls","version":"3.0.5"},{"type":"application","name":"attendedsysupgrade-common","version":"9","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","name":"base-files","version":"1696~b21cfa8f8c","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:busybox:busybox:1.37.0","type":"application","name":"busybox","version":"1.37.0"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"name":"ca-bundle","type":"application","version":"20250419"},{"name":"cgi-io","type":"application","version":"2025.12.11~658b14bd","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"cpe":"cpe:/a:thekelleys:dnsmasq:2.91","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2.91","type":"application","name":"dnsmasq"},{"version":"2025.89","type":"application","name":"dropbear","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","type":"application","name":"e2fsprogs","version":"1.47.3"},{"type":"application","version":"2025.03.17~b6e51575","name":"firewall4","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"fstools","type":"application","version":"2026.02.15~8d377aa6"},{"name":"fwtool","type":"application","version":"2025.10.03~04cd252e","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"getrandom","type":"application","version":"2025.10.30~6f78fa49"},{"type":"application","version":"2.12","name":"grub2","licenses":[{"license":{"name":"GPL-3.0-or-later"}}],"cpe":"cpe:/a:gnu:grub2:2.12"},{"cpe":"cpe:/a:gnu:grub2:2.12","licenses":[{"license":{"name":"GPL-3.0-or-later"}}],"version":"2.12","type":"application","name":"grub2-bios-setup"},{"version":"2.12","type":"application","name":"grub2-efi","licenses":[{"license":{"name":"GPL-3.0-or-later"}}],"cpe":"cpe:/a:gnu:grub2:2.12"},{"licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:jansson_project:jansson:2.14.1","version":"2.14.1","type":"library","name":"jansson"},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.03.13~81563384","name":"jshn"},{"version":"2026.03.16~b9034210","type":"application","name":"jsonfilter","licenses":[{"license":{"name":"ISC"}}]},{"version":"6.12.74","type":"operating-system","name":"kernel","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-button-hotplug","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"kmod-crypto-crc32c","type":"application","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-crypto-hash","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"name":"kmod-fs-vfat","type":"application","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-input-core","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"type":"application","name":"kmod-lib-crc-ccitt","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-lib-crc32c","type":"application","version":"6.12.74"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","version":"6.12.74","type":"application","name":"kmod-nf-conntrack"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","version":"6.12.74","type":"application","name":"kmod-nf-conntrack6"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","name":"kmod-nf-flow","type":"application","version":"6.12.74"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nf-log","version":"6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-nf-log6","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"name":"kmod-nf-nat","type":"application","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","type":"application","name":"kmod-nf-reject","version":"6.12.74"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","version":"6.12.74","name":"kmod-nf-reject6"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nfnetlink","type":"application","version":"6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-nft-core","cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-nft-fib","type":"application","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-nft-nat","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","name":"kmod-nft-offload","type":"application","version":"6.12.74"},{"version":"6.12.74","type":"application","name":"kmod-nls-base","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","type":"application","name":"kmod-nls-cp437","version":"6.12.74"},{"name":"kmod-nls-iso8859-1","type":"application","version":"6.12.74","cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","version":"6.12.74","type":"application","name":"kmod-nls-utf8"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","version":"6.12.74","type":"application","name":"kmod-ppp"},{"name":"kmod-pppoe","type":"application","version":"6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74"},{"type":"application","name":"kmod-pppox","version":"6.12.74","cpe":"cpe:/o:linux:linux_kernel:6.12.74","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.74","version":"6.12.74","type":"application","name":"kmod-slhc"},{"licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3","name":"libblkid","type":"library","version":"2.41.3"},{"licenses":[{"license":{"name":"ISC"}}],"name":"libblobmsg-json","type":"library","version":"2026.03.13~81563384"},{"type":"application","version":"1.2.5","name":"libc","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"version":"1.47.3","type":"library","name":"libcomerr","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","type":"library","name":"libe2p","version":"1.47.3"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libext2fs","type":"library","version":"1.47.3"},{"type":"library","name":"libf2fs","version":"1.16.0","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","name":"libgcc","version":"14.3.0","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libiwinfo-data","type":"application","version":"2026.01.14~f5dd57a8"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","type":"library","name":"libiwinfo"},{"version":"0.18","type":"library","name":"libjson-c","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:json-c:json-c:0.18"},{"name":"libjson-script","type":"application","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"type":"library","name":"liblucihttp-ucode","version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp","type":"library","version":"2023.03.15~9b5b683f"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:arm:mbed_tls:3.6.5","version":"3.6.5","type":"library","name":"libmbedtls"},{"licenses":[{"license":{"name":"LGPL-2.1+"}}],"cpe":"cpe:/a:netfilter:libmnl:1.0.5","name":"libmnl","type":"library","version":"1.0.5"},{"cpe":"cpe:/a:netfilter:libnftnl:1.3.1","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library","name":"libnftnl","version":"1.3.1"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~40493a65","type":"library","name":"libnl-tiny"},{"version":"1.2.5","type":"application","name":"libpthread","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"type":"application","name":"librt","version":"1.2.5"},{"cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"LGPL-2.1-or-later"}}],"type":"library","name":"libsmartcols","version":"2.41.3"},{"cpe":"cpe:/a:e2fsprogs_project:e2fsprogs:1.47.3","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.47.3","type":"library","name":"libss"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","type":"library","name":"libubox"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","version":"2025.12.02~3cc98db1","name":"libubus"},{"version":"2025.12.02~66127cd7","type":"library","name":"libuci","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"type":"library","name":"libuclient","version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}]},{"name":"libucode","type":"library","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"libudebug","type":"library","version":"2026.01.16~875e1a7a"},{"licenses":[{"license":{"name":"ISC"}}],"type":"library","version":"2026.03.01~99f1c0db","name":"libustream-mbedtls"},{"cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"BSD-3-Clause"}}],"name":"libuuid","type":"library","version":"2.41.3"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","type":"application","name":"logd"},{"version":"26.075.80566~6efa8ae","type":"application","name":"luci","licenses":[{"license":{"name":"Apache-2.0"}}]},{"version":"26.075.80566~6efa8ae","type":"application","name":"luci-app-attendedsysupgrade","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","name":"luci-app-firewall","version":"26.075.80566~6efa8ae","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-app-package-manager","type":"application","version":"26.075.80566~6efa8ae"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-base","type":"application","version":"26.075.80566~6efa8ae"},{"type":"application","name":"luci-lib-uqr","version":"26.075.80566~6efa8ae","licenses":[{"license":{"name":"MIT"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.075.80566~6efa8ae","name":"luci-light"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-mod-admin-full","version":"26.075.80566~6efa8ae"},{"name":"luci-mod-network","type":"application","version":"26.075.80566~6efa8ae","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-mod-status","type":"application","version":"26.075.80566~6efa8ae","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","version":"26.075.80566~6efa8ae","name":"luci-mod-system"},{"version":"26.075.80566~6efa8ae","type":"application","name":"luci-proto-ipv6","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.075.80566~6efa8ae","type":"application","name":"luci-proto-ppp"},{"type":"application","version":"26.075.80566~6efa8ae","name":"luci-ssl","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.075.80566~6efa8ae","type":"application","name":"luci-theme-bootstrap"},{"type":"application","name":"mkf2fs","version":"1.16.0","cpe":"cpe:/a:f2fs-tools_project:f2fs-tools:1.16.0","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0+"}}],"type":"application","name":"mtd","version":"27"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"netifd","type":"application","version":"2026.02.26~cbb83a18"},{"version":"1.1.6","type":"application","name":"nftables-json","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2026.01.25~ee2949e3","type":"application","name":"odhcp6c","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2026.03.16~edf2e523","type":"application","name":"odhcpd-ipv6only","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.12.10~f0670054","type":"application","name":"openwrt-keyring"},{"version":"2026.01.13~2526d84b","type":"application","name":"owut","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"partx-utils","type":"application","version":"2.41.3","cpe":"cpe:/a:kernel:util-linux:2.41.3","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","name":"ppp","type":"application","version":"2.5.2"},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","type":"application","version":"2.5.2","name":"ppp-mod-pppoe"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","version":"2026.03.13~58eb263d","name":"procd"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd-seccomp","version":"2026.03.13~58eb263d"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-ujail","type":"application","version":"2026.03.13~58eb263d"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"px5g-mbedtls","type":"application","version":"11"},{"type":"application","version":"2025.12.03~ffb9961c","name":"rpcd","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application","name":"rpcd-mod-file"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application","name":"rpcd-mod-iwinfo"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","version":"20240305","name":"rpcd-mod-luci"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application","name":"rpcd-mod-rpcsys"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","name":"rpcd-mod-rrdns","version":"20170710"},{"licenses":[{"license":{"name":"ISC"}}],"name":"rpcd-mod-ucode","type":"application","version":"2025.12.03~ffb9961c"},{"name":"ubox","type":"application","version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","version":"2025.12.02~3cc98db1","name":"ubus"},{"type":"application","name":"ubusd","version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"type":"application","name":"uci","version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"type":"application","name":"uclient-fetch","version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"type":"application","version":"2026.01.16~85922056","name":"ucode"},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-fs","type":"application","version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-html","type":"application","version":"1"},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-log","type":"application","version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-math"},{"type":"application","version":"2026.01.16~85922056","name":"ucode-mod-ubus","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci","type":"application","version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uclient","type":"application","version":"2026.02.20~7a0aa2e4"},{"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-uloop","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","version":"2025.10.03~ebb92e6b","name":"uhttpd","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","version":"2025.10.03~ebb92e6b","name":"uhttpd-mod-ubus","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"urandom-seed","version":"3"},{"type":"application","name":"urngd","version":"2025.10.03~f17e33d9","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}]},{"type":"application","name":"usign","version":"2025.10.03~c4c72b1b","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"Zlib"}}],"cpe":"cpe:/a:zlib:zlib:1.3.1","type":"library","name":"zlib","version":"1.3.1"}],"serialNumber":"urn:uuid:9a146cf7-ab5e-43a7-a204-7ea2ac130e43","bomFormat":"CycloneDX"}