{"specVersion":"1.4","version":1,"metadata":{"timestamp":"2026-05-21T22:44:01Z"},"components":[{"type":"application","name":"apk-openssl","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"3.0.5"},{"name":"attendedsysupgrade-common","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"10"},{"type":"application","name":"base-files","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1932~5273c13600"},{"type":"application","name":"bcm63xx-cfe","version":"2025.04.02~b8128fa4"},{"name":"block-mount","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.15~8d377aa6"},{"name":"busybox","type":"application","version":"1.37.0","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:busybox:busybox:1.37.0"},{"version":"20260223","licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"type":"application","name":"ca-bundle"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"2025.12.11~658b14bd","name":"cgi-io","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"29","type":"application","name":"default-settings"},{"type":"application","name":"default-settings-chn","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"29"},{"name":"dnsmasq-full","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2.91","cpe":"cpe:/a:thekelleys:dnsmasq:2.91"},{"version":"2025.89","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","name":"dropbear","type":"application"},{"cpe":"cpe:/a:kernel:ethtool:6.15","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"6.15","name":"ethtool","type":"application"},{"type":"application","name":"firewall4","version":"2025.03.17~b6e51575","licenses":[{"license":{"name":"ISC"}}]},{"name":"fstools","type":"application","version":"2026.02.15~8d377aa6","licenses":[{"license":{"name":"GPL-2.0"}}]},{"name":"fwtool","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.03~04cd252e"},{"version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"getrandom","type":"application"},{"name":"jansson","type":"library","cpe":"cpe:/a:jansson_project:jansson:2.14.1","licenses":[{"license":{"name":"MIT"}}],"version":"2.14.1"},{"type":"application","name":"jshn","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.16~b9034210","name":"jsonfilter","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"operating-system","name":"kernel"},{"type":"application","name":"kmod-crypto-aead","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-crypto-arc4"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-crypto-crc32c"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-crypto-ecb","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-hash","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-hmac","type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-crypto-manager","type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-crypto-null"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-rng","type":"application"},{"name":"kmod-crypto-sha1","type":"application","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","name":"kmod-crypto-sha3","type":"application"},{"type":"application","name":"kmod-crypto-sha512","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-crypto-user"},{"type":"application","name":"kmod-gpio-button-hotplug","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}}]},{"type":"application","name":"kmod-lib-crc-ccitt","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-lib-crc32c","type":"application"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-macvlan","type":"application"},{"type":"application","name":"kmod-mppe","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-conntrack","type":"application"},{"type":"application","name":"kmod-nf-conntrack-netlink","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","type":"application","name":"kmod-nf-conntrack6"},{"name":"kmod-nf-flow","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-log","type":"application"},{"name":"kmod-nf-log6","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"type":"application","name":"kmod-nf-nat","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-nathelper","type":"application"},{"name":"kmod-nf-reject","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nf-reject6","type":"application"},{"name":"kmod-nfnetlink","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"type":"application","name":"kmod-nft-core","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-nft-fib","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nft-fullcone"},{"type":"application","name":"kmod-nft-nat","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nft-offload"},{"type":"application","name":"kmod-ppp","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-pppoe","type":"application"},{"name":"kmod-pppox","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"name":"kmod-slhc","type":"application","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"version":"14.3.0","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libatomic","type":"application"},{"type":"library","name":"libblobmsg-json","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"name":"libc","type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5"},{"version":"14.3.0","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libgcc","type":"application"},{"cpe":"cpe:/a:gmplib:gmp:6.3.0","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"6.3.0","name":"libgmp","type":"library"},{"type":"application","name":"libiwinfo-data","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8"},{"type":"library","name":"libiwinfo","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8"},{"type":"library","name":"libjson-c","cpe":"cpe:/a:json-c:json-c:0.18","version":"0.18","licenses":[{"license":{"name":"MIT"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","type":"application","name":"libjson-script"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2023.03.15~9b5b683f","name":"liblucihttp-ucode","type":"library"},{"version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}],"name":"liblucihttp","type":"library"},{"version":"1.0.5","licenses":[{"license":{"name":"LGPL-2.1+"}}],"cpe":"cpe:/a:netfilter:libmnl:1.0.5","type":"library","name":"libmnl"},{"cpe":"cpe:/a:netfilter:libnetfilter_conntrack:1.1.0","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"1.1.0","name":"libnetfilter-conntrack","type":"library"},{"type":"library","name":"libnettle","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"3.10.2","cpe":"cpe:/a:nettle_project:nettle:3.10.2"},{"cpe":"cpe:/a:netfilter:libnfnetlink:1.0.2","licenses":[{"license":{"name":"GPL-2.0+"}}],"version":"1.0.2","type":"library","name":"libnfnetlink"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"1.3.1","cpe":"cpe:/a:netfilter:libnftnl:1.3.1","name":"libnftnl","type":"library"},{"name":"libnl-tiny","type":"library","version":"2025.12.02~40493a65","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"name":"libopenssl","type":"library","cpe":"cpe:/a:openssl:openssl:3.5.6","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"3.5.6"},{"type":"application","name":"libpthread","version":"1.2.5","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}]},{"name":"libubox","type":"library","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1","name":"libubus","type":"library"},{"version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"libuci","type":"library"},{"name":"libuclient","type":"library","licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4"},{"type":"library","name":"libucode","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"name":"libudebug","type":"library","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.16~875e1a7a"},{"version":"2026.03.01~99f1c0db","licenses":[{"license":{"name":"ISC"}}],"type":"library","name":"libustream-openssl"},{"type":"application","name":"logd","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49"},{"type":"application","name":"luci","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","name":"luci-app-attendedsysupgrade","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-app-firewall","type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","name":"luci-app-package-manager","type":"application"},{"name":"luci-base","type":"application","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"version":"26.129.30102~e7fd22b","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"luci-i18n-attendedsysupgrade-zh-cn","type":"application"},{"version":"26.136.30760~c48d3f0","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-i18n-base-zh-cn"},{"name":"luci-i18n-firewall-zh-cn","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.136.30760~c48d3f0"},{"name":"luci-i18n-package-manager-zh-cn","type":"application","version":"26.129.30102~e7fd22b","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-lib-uqr","type":"application","licenses":[{"license":{"name":"MIT"}}],"version":"26.122.31359~3e514b4"},{"type":"application","name":"luci-light","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4"},{"type":"application","name":"luci-mod-admin-full","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-mod-network"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","type":"application","name":"luci-mod-status"},{"name":"luci-mod-system","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-proto-ipv6","type":"application"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci-proto-ppp"},{"name":"luci-theme-bootstrap","type":"application","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4"},{"licenses":[{"license":{"name":"GPL-2.0+"}}],"version":"27","type":"application","name":"mtd"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.26~cbb83a18","type":"application","name":"netifd"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.1.6","name":"nftables-json","type":"application"},{"version":"2026.01.25~ee2949e3","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"odhcp6c","type":"application"},{"name":"odhcpd-ipv6only","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.16~edf2e523"},{"version":"2025.12.11~14e1f88b","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"openwrt-keyring"},{"version":"2026.04.09~5d6760b5","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"owut","type":"application"},{"name":"ppp","type":"application","licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2"},{"name":"ppp-mod-pppoe","type":"application","version":"2.5.2","licenses":[{"license":{"name":"BSD-4-Clause"}}],"cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.13~58eb263d","name":"procd","type":"application"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"procd-seccomp"},{"name":"procd-ujail","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.13~58eb263d"},{"type":"application","name":"rpcd","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"type":"application","name":"rpcd-mod-file","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c"},{"version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"rpcd-mod-iwinfo"},{"type":"library","name":"rpcd-mod-luci","version":"20240305","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"rpcd-mod-rpcsys","type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"name":"rpcd-mod-rrdns","type":"library","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"20170710"},{"name":"rpcd-mod-ucode","type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"name":"shellsync","type":"application","version":"0.2"},{"version":"2.3.0","licenses":[{"license":{"name":"GPLv2"}}],"cpe":"cpe:/a:mtd-utils_project:mtd-utils:2.3.0","name":"ubi-utils","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49","type":"application","name":"ubox"},{"version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}],"name":"ubus","type":"application"},{"type":"application","name":"ubusd","version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}]},{"version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","name":"uci"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","type":"application","name":"uclient-fetch"},{"name":"ucode","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"type":"application","name":"ucode-mod-fs","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"version":"1","type":"application","name":"ucode-mod-html"},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-log","type":"application"},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-math","type":"application"},{"type":"application","name":"ucode-mod-ubus","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"type":"application","name":"ucode-mod-uci","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.02.20~7a0aa2e4","type":"application","name":"ucode-mod-uclient"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","type":"application","name":"ucode-mod-uloop"},{"version":"2025.10.03~ebb92e6b","licenses":[{"license":{"name":"ISC"}}],"name":"uhttpd","type":"application"},{"version":"2025.10.03~ebb92e6b","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"uhttpd-mod-ubus"},{"version":"3","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"urandom-seed","type":"application"},{"name":"urngd","type":"application","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}],"version":"2025.10.03~f17e33d9"},{"type":"application","name":"usign","version":"2025.10.03~c4c72b1b","licenses":[{"license":{"name":"ISC"}}]},{"cpe":"cpe:/a:zlib:zlib:1.3.1","version":"1.3.1","licenses":[{"license":{"name":"Zlib"}}],"name":"zlib","type":"library"}],"bomFormat":"CycloneDX","serialNumber":"urn:uuid:f630ea11-658e-4e45-8f57-72b50a4f226b"}