{"bom":{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","components":[{"bom-ref":"pkg:generic/busybox@1.35.0?package-id=317ed893e67837e0","cpe":"cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*","hashes":[{"alg":"SHA-1","content":"434b3b60c0514192558a00c8dc7542721ed7fe43"},{"alg":"SHA-256","content":"6e123e7f3202a8c1e9b1f94d8941580a25135382b99e8d3e34fb858bba311348"}],"name":"busybox","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:location:0:path","value":"/busybox"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:licenseSource","value":"name-map"},{"name":"bomlens:originalPurl","value":"pkg:generic/busybox@1.35.0"},{"name":"bomlens:purlSource","value":"upstream-map"}],"purl":"pkg:github/mirror/busybox@1_35_0","type":"application","version":"1.35.0","licenses":[{"license":{"id":"GPL-2.0-only"}}]}],"metadata":{"component":{"bom-ref":"2f2d72d1ff80fdd8","hashes":[{"alg":"SHA-256","content":"6e123e7f3202a8c1e9b1f94d8941580a25135382b99e8d3e34fb858bba311348"}],"name":"busybox","type":"file","version":"sha256:6e123e7f3202a8c1e9b1f94d8941580a25135382b99e8d3e34fb858bba311348"},"lifecycles":[{"phase":"post-build"}],"properties":[{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T22:35:32Z","tools":{"components":[{"author":"anchore","name":"syft","type":"application","version":"1.54.1"},{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:8e99c35a-82eb-4c3e-aef2-aa34d086f960","specVersion":"1.6","version":1,"compositions":[{"aggregate":"unknown"}]},"security":{"Results":[{"Target":"CPE index (NVD)","Class":"firmware","Vulnerabilities":[{"VulnerabilityID":"CVE-2022-28391","PkgName":"busybox","InstalledVersion":"1.35.0","Severity":"HIGH","PrimaryURL":"https://nvd.nist.gov/vuln/detail/CVE-2022-28391","CVSS":{"cve-bin-tool":{"V3Score":8.8}},"source":"cve-bin-tool"},{"VulnerabilityID":"CVE-2022-30065","PkgName":"busybox","InstalledVersion":"1.35.0","Severity":"HIGH","PrimaryURL":"https://nvd.nist.gov/vuln/detail/CVE-2022-30065","CVSS":{"cve-bin-tool":{"V3Score":7.8}},"source":"cve-bin-tool"},{"VulnerabilityID":"CVE-2022-48174","PkgName":"busybox","InstalledVersion":"1.35.0","Severity":"CRITICAL","PrimaryURL":"https://nvd.nist.gov/vuln/detail/CVE-2022-48174","CVSS":{"cve-bin-tool":{"V3Score":9.8}},"source":"cve-bin-tool"},{"VulnerabilityID":"CVE-2025-46394","PkgName":"busybox","InstalledVersion":"1.35.0","Severity":"LOW","PrimaryURL":"https://nvd.nist.gov/vuln/detail/CVE-2025-46394","CVSS":{"cve-bin-tool":{"V3Score":3.2}},"source":"cve-bin-tool"},{"VulnerabilityID":"CVE-2025-60876","PkgName":"busybox","InstalledVersion":"1.35.0","Severity":"MEDIUM","PrimaryURL":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","CVSS":{"cve-bin-tool":{"V3Score":6.5}},"source":"cve-bin-tool"}]}],"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a13c8e-cc63-706e-91f9-c7941b0eedce","CreatedAt":"2026-10-14T22:35:53.827030529Z","ArtifactName":"binary-busybox_1.0.0_bom.json","ArtifactType":"cyclonedx","UncheckedComponents":{"Count":0,"Components":[]}},"scancode":null}