{ "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:739f03d9-256d-4d8f-860b-f0d74a016af9", "version": 1, "metadata": { "timestamp": "2026-06-30T10:28:52Z", "tools": { "components": [ { "type": "application", "name": "pfcli-sbom", "version": "1.6.11", "manufacturer": { "name": "CloudLinux" } } ] }, "component": { "type": "application", "bom-ref": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.33-tuxcare.2", "group": "org.apache.struts", "name": "struts2-rest-plugin", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.33-tuxcare.2", "version": "2.5.33-tuxcare.2" } }, "components": [ { "type": "library", "bom-ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.4.17", "group": "com.thoughtworks.xstream", "name": "xstream", "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.4.17", "version": "1.4.17", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/io.github.x-stream/mxparser@1.2.1", "group": "io.github.x-stream", "name": "mxparser", "purl": "pkg:maven/io.github.x-stream/mxparser@1.2.1", "version": "1.2.1", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/xmlpull/xmlpull@1.1.3.1", "group": "xmlpull", "name": "xmlpull", "purl": "pkg:maven/xmlpull/xmlpull@1.1.3.1", "version": "1.1.3.1", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@compile%20%28optional%29?classifier=1.9.4-tuxcare.1", "group": "commons-beanutils", "name": "commons-beanutils", "purl": "pkg:maven/commons-beanutils/commons-beanutils@compile%20%28optional%29?classifier=1.9.4-tuxcare.1", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-collections/commons-collections@compile%20%28optional%29?classifier=3.2.2", "group": "commons-collections", "name": "commons-collections", "purl": "pkg:maven/commons-collections/commons-collections@compile%20%28optional%29?classifier=3.2.2", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-lang/commons-lang@compile%20%28optional%29?classifier=2.5", "group": "commons-lang", "name": "commons-lang", "purl": "pkg:maven/commons-lang/commons-lang@compile%20%28optional%29?classifier=2.5", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-logging/commons-logging@compile%20%28optional%29?classifier=1.2", "group": "commons-logging", "name": "commons-logging", "purl": "pkg:maven/commons-logging/commons-logging@compile%20%28optional%29?classifier=1.2", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/net.sf.ezmorph/ezmorph@compile%20%28optional%29?classifier=1.0.6", "group": "net.sf.ezmorph", "name": "ezmorph", "purl": "pkg:maven/net.sf.ezmorph/ezmorph@compile%20%28optional%29?classifier=1.0.6", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5", "group": "com.fasterxml.jackson.core", "name": "jackson-core", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5", "version": "2.10.5", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1", "group": "com.fasterxml.jackson.core", "name": "jackson-databind", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1", "version": "2.10.5.1", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5", "group": "com.fasterxml.jackson.core", "name": "jackson-annotations", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5", "version": "2.10.5", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@compile%20%28optional%29?classifier=2.10.5", "group": "com.fasterxml.jackson.dataformat", "name": "jackson-dataformat-xml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@compile%20%28optional%29?classifier=2.10.5", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@compile%20%28optional%29?classifier=2.10.5", "group": "com.fasterxml.jackson.module", "name": "jackson-module-jaxb-annotations", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@compile%20%28optional%29?classifier=2.10.5", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@compile%20%28optional%29?classifier=2.3.2", "group": "jakarta.xml.bind", "name": "jakarta.xml.bind-api", "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@compile%20%28optional%29?classifier=2.3.2", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@compile%20%28optional%29?classifier=1.2.1", "group": "jakarta.activation", "name": "jakarta.activation-api", "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@compile%20%28optional%29?classifier=1.2.1", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@compile%20%28optional%29?classifier=4.2", "group": "org.codehaus.woodstox", "name": "stax2-api", "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@compile%20%28optional%29?classifier=4.2", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@compile%20%28optional%29?classifier=6.2.1", "group": "com.fasterxml.woodstox", "name": "woodstox-core", "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@compile%20%28optional%29?classifier=6.2.1", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-test@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-web@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-aop@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-beans@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-context@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-expression@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.springframework/spring-core@compile%20%28optional%29?classifier=4.3.26.RELEASE", "group": "org.springframework", "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@compile%20%28optional%29?classifier=4.3.26.RELEASE", "version": "compile (optional)", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.apache.struts/struts2-core@2.5.33-tuxcare.2", "group": "org.apache.struts", "name": "struts2-core", "purl": "pkg:maven/org.apache.struts/struts2-core@2.5.33-tuxcare.2", "version": "2.5.33-tuxcare.2", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.31", "group": "org.freemarker", "name": "freemarker", "purl": "pkg:maven/org.freemarker/freemarker@2.3.31", "version": "2.3.31", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/ognl/ognl@3.1.29", "group": "ognl", "name": "ognl", "purl": "pkg:maven/ognl/ognl@3.1.29", "version": "3.1.29", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.javassist/javassist@3.20.0-GA", "group": "org.javassist", "name": "javassist", "purl": "pkg:maven/org.javassist/javassist@3.20.0-GA", "version": "3.20.0-GA", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.12.4", "group": "org.apache.logging.log4j", "name": "log4j-api", "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.12.4", "version": "2.12.4", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-fileupload/commons-fileupload@1.4", "group": "commons-fileupload", "name": "commons-fileupload", "purl": "pkg:maven/commons-fileupload/commons-fileupload@1.4", "version": "1.4", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/commons-io/commons-io@2.6-tuxcare.1", "group": "commons-io", "name": "commons-io", "purl": "pkg:maven/commons-io/commons-io@2.6-tuxcare.1", "version": "2.6-tuxcare.1", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.8.1-tuxcare.1", "group": "org.apache.commons", "name": "commons-lang3", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.8.1-tuxcare.1", "version": "3.8.1-tuxcare.1", "scope": "required" }, { "type": "library", "bom-ref": "pkg:maven/javax.servlet/servlet-api@2.4", "group": "javax.servlet", "name": "servlet-api", "purl": "pkg:maven/javax.servlet/servlet-api@2.4", "version": "2.4", "scope": "optional" } ], "dependencies": [ { "ref": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.33-tuxcare.2", "dependsOn": [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1", "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@compile%20%28optional%29?classifier=2.10.5", "pkg:maven/com.thoughtworks.xstream/xstream@1.4.17", "pkg:maven/javax.servlet/servlet-api@2.4", "pkg:maven/org.apache.struts/struts2-core@2.5.33-tuxcare.2", "pkg:maven/org.springframework/spring-core@compile%20%28optional%29?classifier=4.3.26.RELEASE", "pkg:maven/org.springframework/spring-test@compile%20%28optional%29?classifier=4.3.26.RELEASE", "pkg:maven/org.springframework/spring-web@compile%20%28optional%29?classifier=4.3.26.RELEASE" ] }, { "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.4.17", "dependsOn": [ "pkg:maven/commons-beanutils/commons-beanutils@compile%20%28optional%29?classifier=1.9.4-tuxcare.1", "pkg:maven/commons-collections/commons-collections@compile%20%28optional%29?classifier=3.2.2", "pkg:maven/commons-lang/commons-lang@compile%20%28optional%29?classifier=2.5", "pkg:maven/commons-logging/commons-logging@compile%20%28optional%29?classifier=1.2", "pkg:maven/io.github.x-stream/mxparser@1.2.1", "pkg:maven/net.sf.ezmorph/ezmorph@compile%20%28optional%29?classifier=1.0.6" ] }, { "ref": "pkg:maven/io.github.x-stream/mxparser@1.2.1", "dependsOn": [ "pkg:maven/xmlpull/xmlpull@1.1.3.1" ] }, { "ref": "pkg:maven/xmlpull/xmlpull@1.1.3.1", "dependsOn": [] }, { "ref": "pkg:maven/commons-beanutils/commons-beanutils@compile%20%28optional%29?classifier=1.9.4-tuxcare.1", "dependsOn": [] }, { "ref": "pkg:maven/commons-collections/commons-collections@compile%20%28optional%29?classifier=3.2.2", "dependsOn": [] }, { "ref": "pkg:maven/commons-lang/commons-lang@compile%20%28optional%29?classifier=2.5", "dependsOn": [] }, { "ref": "pkg:maven/commons-logging/commons-logging@compile%20%28optional%29?classifier=1.2", "dependsOn": [] }, { "ref": "pkg:maven/net.sf.ezmorph/ezmorph@compile%20%28optional%29?classifier=1.0.6", "dependsOn": [] }, { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5", "dependsOn": [] }, { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1", "dependsOn": [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5" ] }, { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5", "dependsOn": [] }, { "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@compile%20%28optional%29?classifier=2.10.5", "dependsOn": [ "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@compile%20%28optional%29?classifier=2.10.5", "pkg:maven/com.fasterxml.woodstox/woodstox-core@compile%20%28optional%29?classifier=6.2.1", "pkg:maven/org.codehaus.woodstox/stax2-api@compile%20%28optional%29?classifier=4.2" ] }, { "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@compile%20%28optional%29?classifier=2.10.5", "dependsOn": [ "pkg:maven/jakarta.activation/jakarta.activation-api@compile%20%28optional%29?classifier=1.2.1", "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@compile%20%28optional%29?classifier=2.3.2" ] }, { "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@compile%20%28optional%29?classifier=2.3.2", "dependsOn": [] }, { "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@compile%20%28optional%29?classifier=1.2.1", "dependsOn": [] }, { "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@compile%20%28optional%29?classifier=4.2", "dependsOn": [] }, { "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@compile%20%28optional%29?classifier=6.2.1", "dependsOn": [] }, { "ref": "pkg:maven/org.springframework/spring-test@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [] }, { "ref": "pkg:maven/org.springframework/spring-web@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [ "pkg:maven/org.springframework/spring-aop@compile%20%28optional%29?classifier=4.3.26.RELEASE", "pkg:maven/org.springframework/spring-beans@compile%20%28optional%29?classifier=4.3.26.RELEASE", "pkg:maven/org.springframework/spring-context@compile%20%28optional%29?classifier=4.3.26.RELEASE" ] }, { "ref": "pkg:maven/org.springframework/spring-aop@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [] }, { "ref": "pkg:maven/org.springframework/spring-beans@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [] }, { "ref": "pkg:maven/org.springframework/spring-context@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [ "pkg:maven/org.springframework/spring-expression@compile%20%28optional%29?classifier=4.3.26.RELEASE" ] }, { "ref": "pkg:maven/org.springframework/spring-expression@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [] }, { "ref": "pkg:maven/org.springframework/spring-core@compile%20%28optional%29?classifier=4.3.26.RELEASE", "dependsOn": [] }, { "ref": "pkg:maven/org.apache.struts/struts2-core@2.5.33-tuxcare.2", "dependsOn": [ "pkg:maven/commons-fileupload/commons-fileupload@1.4", "pkg:maven/commons-io/commons-io@2.6-tuxcare.1", "pkg:maven/ognl/ognl@3.1.29", "pkg:maven/org.apache.commons/commons-lang3@3.8.1-tuxcare.1", "pkg:maven/org.apache.logging.log4j/log4j-api@2.12.4", "pkg:maven/org.freemarker/freemarker@2.3.31" ] }, { "ref": "pkg:maven/org.freemarker/freemarker@2.3.31", "dependsOn": [] }, { "ref": "pkg:maven/ognl/ognl@3.1.29", "dependsOn": [ "pkg:maven/org.javassist/javassist@3.20.0-GA" ] }, { "ref": "pkg:maven/org.javassist/javassist@3.20.0-GA", "dependsOn": [] }, { "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.12.4", "dependsOn": [] }, { "ref": "pkg:maven/commons-fileupload/commons-fileupload@1.4", "dependsOn": [] }, { "ref": "pkg:maven/commons-io/commons-io@2.6-tuxcare.1", "dependsOn": [] }, { "ref": "pkg:maven/org.apache.commons/commons-lang3@3.8.1-tuxcare.1", "dependsOn": [] }, { "ref": "pkg:maven/javax.servlet/servlet-api@2.4", "dependsOn": [] } ] }