{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2ad026b1-c0a2-4974-8a69-c820a2bd049f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-10T19:01:58Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.3",
          "vendor": "CloudLinux"
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-log4j2@2.3.6.RELEASE-tuxcare.4",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-log4j2",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-log4j2@2.3.6.RELEASE-tuxcare.4",
      "version": "2.3.6.RELEASE-tuxcare.4"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.13.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-slf4j-impl",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.13.3",
      "version": "2.13.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.25",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.25",
      "version": "1.7.25",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3",
      "version": "2.13.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3",
      "version": "2.13.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@compile%20%28scope%20not%20updated%20to%20compile%29?classifier=2.13.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@compile%20%28scope%20not%20updated%20to%20compile%29?classifier=2.13.3",
      "version": "compile (scope not updated to compile)",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.13.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-jul",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.13.3",
      "version": "2.13.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30",
      "version": "1.7.30",
      "scope": "required"
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-log4j2@2.3.6.RELEASE-tuxcare.4",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-core@compile%20%28scope%20not%20updated%20to%20compile%29?classifier=2.13.3",
        "pkg:maven/org.apache.logging.log4j/log4j-jul@2.13.3",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.13.3",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.13.3",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3",
        "pkg:maven/org.slf4j/slf4j-api@1.7.25"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@1.7.25",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-core@compile%20%28scope%20not%20updated%20to%20compile%29?classifier=2.13.3",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.13.3",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.25"
      ]
    }
  ]
}