{"metadata":{"timestamp":"2026-05-21T16:43:53Z"},"specVersion":"1.4","components":[{"type":"application","name":"apk-openssl","version":"3.0.5","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"attendedsysupgrade-common","type":"application","version":"10","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1932~5273c13600","name":"base-files","type":"application"},{"name":"block-mount","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.15~8d377aa6"},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"cpe":"cpe:/a:kernel:util-linux:2.41.3","version":"2.41.3","name":"blockdev","type":"application"},{"type":"application","name":"busybox","cpe":"cpe:/a:busybox:busybox:1.37.0","version":"1.37.0","licenses":[{"license":{"name":"GPL-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0-or-later"}},{"license":{"name":"MPL-2.0"}}],"version":"20260223","name":"ca-bundle","type":"application"},{"version":"2025.12.11~658b14bd","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"application","name":"cgi-io"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"29","name":"default-settings","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"29","type":"application","name":"default-settings-chn"},{"name":"dnsmasq-full","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"cpe":"cpe:/a:thekelleys:dnsmasq:2.91","version":"2.91"},{"name":"dropbear","type":"application","licenses":[{"license":{"name":"MIT"}}],"cpe":"cpe:/a:dropbear_ssh_project:dropbear_ssh:2025.89","version":"2025.89"},{"name":"firewall4","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.03.17~b6e51575"},{"type":"application","name":"fstools","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.15~8d377aa6"},{"type":"application","name":"fwtool","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.03~04cd252e"},{"type":"application","name":"getrandom","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.10.30~6f78fa49"},{"version":"2.14.1","cpe":"cpe:/a:jansson_project:jansson:2.14.1","licenses":[{"license":{"name":"MIT"}}],"name":"jansson","type":"library"},{"name":"jshn","type":"application","version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}]},{"name":"jsonfilter","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.16~b9034210"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"kernel","type":"operating-system"},{"type":"application","name":"kmod-crypto-aead","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-arc4","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-crypto-crc32c","type":"application"},{"name":"kmod-crypto-ecb","type":"application","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-crypto-hash"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","type":"application","name":"kmod-crypto-hmac"},{"name":"kmod-crypto-manager","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-crypto-null"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-crypto-rng"},{"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-crypto-sha1","type":"application"},{"type":"application","name":"kmod-crypto-sha3","licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-crypto-sha512","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","name":"kmod-crypto-user","type":"application"},{"version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"kmod-gpio-button-hotplug"},{"type":"application","name":"kmod-lib-crc-ccitt","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","name":"kmod-lib-crc32c","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-macvlan"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-mppe"},{"name":"kmod-nf-conntrack","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-nf-conntrack-netlink"},{"type":"application","name":"kmod-nf-conntrack6","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-nf-flow","type":"application","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"name":"kmod-nf-log","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nf-log6","type":"application"},{"type":"application","name":"kmod-nf-nat","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"type":"application","name":"kmod-nf-nathelper","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"type":"application","name":"kmod-nf-reject","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nf-reject6"},{"type":"application","name":"kmod-nfnetlink","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"name":"kmod-nft-core","type":"application","cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nft-fib"},{"name":"kmod-nft-fullcone","type":"application","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87"},{"cpe":"cpe:/o:linux:linux_kernel:6.12.87","version":"6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"kmod-nft-nat"},{"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}],"name":"kmod-nft-offload","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","type":"application","name":"kmod-ppp"},{"licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","name":"kmod-pppoe","type":"application"},{"type":"application","name":"kmod-pppox","licenses":[{"license":{"name":"GPL-2.0-only"}}],"version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87"},{"type":"application","name":"kmod-slhc","version":"6.12.87","cpe":"cpe:/o:linux:linux_kernel:6.12.87","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"version":"14.3.0","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"name":"libatomic","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","name":"libblobmsg-json","type":"library"},{"name":"libc","type":"application","licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"14.3.0","type":"application","name":"libgcc"},{"type":"library","name":"libgmp","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"version":"6.3.0","cpe":"cpe:/a:gmplib:gmp:6.3.0"},{"version":"2026.01.14~f5dd57a8","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"libiwinfo-data"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.14~f5dd57a8","type":"library","name":"libiwinfo"},{"version":"0.18","cpe":"cpe:/a:json-c:json-c:0.18","licenses":[{"license":{"name":"MIT"}}],"type":"library","name":"libjson-c"},{"version":"2026.03.13~81563384","licenses":[{"license":{"name":"ISC"}}],"name":"libjson-script","type":"application"},{"type":"library","name":"liblucihttp-ucode","licenses":[{"license":{"name":"ISC"}}],"version":"2023.03.15~9b5b683f"},{"version":"2023.03.15~9b5b683f","licenses":[{"license":{"name":"ISC"}}],"type":"library","name":"liblucihttp"},{"type":"library","name":"libmnl","cpe":"cpe:/a:netfilter:libmnl:1.0.5","version":"1.0.5","licenses":[{"license":{"name":"LGPL-2.1+"}}]},{"version":"1.1.0","cpe":"cpe:/a:netfilter:libnetfilter_conntrack:1.1.0","licenses":[{"license":{"name":"GPL-2.0-or-later"}}],"type":"library","name":"libnetfilter-conntrack"},{"type":"library","name":"libnettle","version":"3.10.2","cpe":"cpe:/a:nettle_project:nettle:3.10.2","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"name":"libnfnetlink","type":"library","licenses":[{"license":{"name":"GPL-2.0+"}}],"version":"1.0.2","cpe":"cpe:/a:netfilter:libnfnetlink:1.0.2"},{"name":"libnftnl","type":"library","version":"1.3.1","cpe":"cpe:/a:netfilter:libnftnl:1.3.1","licenses":[{"license":{"name":"GPL-2.0-or-later"}}]},{"version":"2025.12.02~40493a65","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"library","name":"libnl-tiny"},{"type":"library","name":"libopenssl","version":"3.5.6","cpe":"cpe:/a:openssl:openssl:3.5.6","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","name":"libpthread","type":"application"},{"licenses":[{"license":{"name":"GPL-3.0-with-GCC-exception"}}],"version":"1.2.5","type":"application","name":"librt"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.03.13~81563384","name":"libubox","type":"library"},{"name":"libubus","type":"library","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1"},{"licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~66127cd7","name":"libuci","type":"library"},{"version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}],"type":"library","name":"libuclient"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"libucode","type":"library"},{"name":"libudebug","type":"library","version":"2026.01.16~875e1a7a","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2026.03.01~99f1c0db","licenses":[{"license":{"name":"ISC"}}],"name":"libustream-openssl","type":"library"},{"version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"logd"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"application","name":"luci"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"26.122.31359~3e514b4","type":"application","name":"luci-app-attendedsysupgrade"},{"type":"application","name":"luci-app-firewall","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"name":"luci-app-package-manager","type":"application","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"type":"application","name":"luci-base","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"26.129.30102~e7fd22b","type":"application","name":"luci-i18n-attendedsysupgrade-zh-cn"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.136.30760~c48d3f0","name":"luci-i18n-base-zh-cn","type":"application"},{"version":"26.136.30760~c48d3f0","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-i18n-firewall-zh-cn","type":"application"},{"type":"application","name":"luci-i18n-package-manager-zh-cn","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.129.30102~e7fd22b"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"MIT"}}],"name":"luci-lib-uqr","type":"application"},{"version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}],"name":"luci-light","type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","name":"luci-mod-admin-full","type":"application"},{"type":"application","name":"luci-mod-network","licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","name":"luci-mod-status","type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","name":"luci-mod-system","type":"application"},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","type":"application","name":"luci-proto-ipv6"},{"type":"application","name":"luci-proto-ppp","version":"26.122.31359~3e514b4","licenses":[{"license":{"name":"Apache-2.0"}}]},{"licenses":[{"license":{"name":"Apache-2.0"}}],"version":"26.122.31359~3e514b4","name":"luci-theme-bootstrap","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0+"}}],"version":"27","type":"application","name":"mtd"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.02.26~cbb83a18","name":"netifd","type":"application"},{"type":"application","name":"nftables-json","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"1.1.6"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.01.25~ee2949e3","name":"odhcp6c","type":"application"},{"version":"2026.03.16~edf2e523","licenses":[{"license":{"name":"GPL-2.0"}}],"type":"application","name":"odhcpd-ipv6only"},{"name":"openwrt-keyring","type":"application","licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2025.12.11~14e1f88b"},{"type":"application","name":"owut","version":"2026.04.09~5d6760b5","licenses":[{"license":{"name":"GPL-2.0-only"}}]},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","type":"application","name":"ppp"},{"licenses":[{"license":{"name":"BSD-4-Clause"}}],"version":"2.5.2","cpe":"cpe:/a:point-to-point_protocol_project:point-to-point_protocol:2.5.2","name":"ppp-mod-pppoe","type":"application"},{"licenses":[{"license":{"name":"GPL-2.0"}}],"version":"2026.03.13~58eb263d","name":"procd","type":"application"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-seccomp","type":"application"},{"version":"2026.03.13~58eb263d","licenses":[{"license":{"name":"GPL-2.0"}}],"name":"procd-ujail","type":"application"},{"type":"application","name":"rpcd","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c","type":"application","name":"rpcd-mod-file"},{"name":"rpcd-mod-iwinfo","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.12.03~ffb9961c"},{"version":"20240305","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","name":"rpcd-mod-luci"},{"type":"application","name":"rpcd-mod-rpcsys","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"version":"20170710","licenses":[{"license":{"name":"Apache-2.0"}}],"type":"library","name":"rpcd-mod-rrdns"},{"name":"rpcd-mod-ucode","type":"application","version":"2025.12.03~ffb9961c","licenses":[{"license":{"name":"ISC"}}]},{"name":"shellsync","type":"application","version":"0.2"},{"name":"ubox","type":"application","version":"2025.10.30~6f78fa49","licenses":[{"license":{"name":"GPL-2.0"}}]},{"version":"2025.12.02~3cc98db1","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","name":"ubus"},{"type":"application","name":"ubusd","licenses":[{"license":{"name":"LGPL-2.1"}}],"version":"2025.12.02~3cc98db1"},{"version":"2025.12.02~66127cd7","licenses":[{"license":{"name":"LGPL-2.1"}}],"type":"application","name":"uci"},{"version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"uclient-fetch"},{"name":"ucode","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-fs","type":"application"},{"licenses":[{"license":{"name":"ISC"}}],"version":"1","type":"application","name":"ucode-mod-html"},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"ucode-mod-log"},{"licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056","name":"ucode-mod-math","type":"application"},{"name":"ucode-mod-ubus","type":"application","version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}]},{"version":"2026.01.16~85922056","licenses":[{"license":{"name":"ISC"}}],"name":"ucode-mod-uci","type":"application"},{"version":"2026.02.20~7a0aa2e4","licenses":[{"license":{"name":"ISC"}}],"type":"application","name":"ucode-mod-uclient"},{"name":"ucode-mod-uloop","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2026.01.16~85922056"},{"name":"uhttpd","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.10.03~ebb92e6b"},{"name":"uhttpd-mod-ubus","type":"application","licenses":[{"license":{"name":"ISC"}}],"version":"2025.10.03~ebb92e6b"},{"version":"3","licenses":[{"license":{"name":"GPL-2.0-only"}}],"type":"application","name":"urandom-seed"},{"name":"urngd","type":"application","version":"2025.10.03~f17e33d9","licenses":[{"license":{"name":"GPL-2.0"}},{"license":{"name":"BSD-3-Clause"}}]},{"type":"application","name":"usign","version":"2025.10.03~c4c72b1b","licenses":[{"license":{"name":"ISC"}}]},{"type":"library","name":"zlib","licenses":[{"license":{"name":"Zlib"}}],"version":"1.3.1","cpe":"cpe:/a:zlib:zlib:1.3.1"}],"version":1,"serialNumber":"urn:uuid:92abfbfc-931d-426e-9c29-8666543d50ac","bomFormat":"CycloneDX"}