<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:6fa32e42-85a3-3a8a-a4b4-8c987a2cd0c6" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2024-03-07T19:46:46Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.11</version>
        <hashes>
          <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash>
          <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>
          <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>
          <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>
          <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.5.8?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-jose-jaxrs</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JOSE JAX-RS</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.5.8?type=bundle</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose-jaxrs</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.5.8</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55525ade5f838741e646063c1148da95</hash>
        <hash alg="SHA-1">fb1f1e19c85298d3d773f4b90b2ecd3b49aae50f</hash>
        <hash alg="SHA-256">57f2accf90747c2ed0e5159444845ef21221908e66c78b9f8c568c45eb757253</hash>
        <hash alg="SHA-512">350b212db3340b3436d82e4efed620f07700aae8c44e9e8c99a7786f8143fedfd2b6ad2de84c68d1e2e5293a63f5636e935cf65149252b20b8bfec7f186c4e96</hash>
        <hash alg="SHA-384">31d5dfd34a8d539902b897c9e70e7da6cd51f84822371aaa943fab57a1f84526115cf0de6904948c3ac6f6e497c0b37a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d3790292a30333a14b7fb1143864a9c</hash>
        <hash alg="SHA-1">a169a961a2bb9ac69517ec1005e451becf5cdfab</hash>
        <hash alg="SHA-256">4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4</hash>
        <hash alg="SHA-512">c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff</hash>
        <hash alg="SHA-384">7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67005a4cf5ee9cfd82edec1bdbecb32b</hash>
        <hash alg="SHA-1">ec8930fa62e7b1758b1664d135f50c7abe86a4a3</hash>
        <hash alg="SHA-256">7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f</hash>
        <hash alg="SHA-512">5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9</hash>
        <hash alg="SHA-384">ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.4.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afcba1114fca8199ef26346dd6011e90</hash>
        <hash alg="SHA-1">c47579857bbf12c85499f431d4ecf27d77976b7c</hash>
        <hash alg="SHA-256">d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279</hash>
        <hash alg="SHA-512">7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6</hash>
        <hash alg="SHA-384">6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/XMLSCHEMA</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5fc3877d2ae732de3c2356147bb05ffa</hash>
        <hash alg="SHA-1">d82f02527d9b2e0a21ad8c7303edc1ff77533472</hash>
        <hash alg="SHA-256">8d29b7319ccd007bd0338d703a6fe4ed02efdf782c6bc2ba35e3d940f6166991</hash>
        <hash alg="SHA-512">88ae20388979a5dca622835fb06b293bf4d4edbdd35cc1ce566c216fa42ef55eb8166ba38f165574da3859b15b1a172fa8492369efd576aa3e16203fab6afe74</hash>
        <hash alg="SHA-384">68654d02adbf0c77caa029924f83a700ab45736748b5d5290d1a0493ec45f67fd1201671099743cb4e1681b9a719dab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3b43cbf4d60c05de9e109da89fc6d87</hash>
        <hash alg="SHA-1">8bd0e0144dd3a8d96bee3246ac4db2aae9788b85</hash>
        <hash alg="SHA-256">f827e1e1d736733c11bd19ba7dba42b318c915dae847f2ed7613648d235f9799</hash>
        <hash alg="SHA-512">3610a3aded67d7684be8daec176777598882013a4e5c13bfe7bc4b570040043fe1e4cb101419fe78aef8d0b88ebd19b4c01b2e38dd8203e5bfc70ae0c09a1d23</hash>
        <hash alg="SHA-384">11f26750e5e78073f5054e75e8c502f157bce22308f62092b1cbc23792118279be560eef332ab56efd93e3a7c5e1a631</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29634f1e7547265d691cca67aa94a815</hash>
        <hash alg="SHA-1">6061f49df2a27df083136a0e5288a61877965bfe</hash>
        <hash alg="SHA-256">2361b09223a252035677550e34db29aae401b585ea5cd919b3c0c544969c35fd</hash>
        <hash alg="SHA-512">54c9413198be4d7c5bba0553256ff999aae8d0393626aa9ec0ca66819c88bbcf45147ecbf4ddf6681463edcc72c3c9f0be2643f9949412e2a2f23e48bdef0148</hash>
        <hash alg="SHA-384">b0a9fdb5413c2a3dd5d29b3d0c00d832ba3fbf2f4882ac452361059bca2ab8a1479c6639c2b923b363066bc8dc9002ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-jose</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JOSE Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e704bc514ff013c653b1a3bd9b244a5</hash>
        <hash alg="SHA-1">908c4b309ef1c420df223df4405c5f3bb7615546</hash>
        <hash alg="SHA-256">d913b4f2d5f8530ec51afde234710d28500ff58f99a257d7353c6b06e413db4a</hash>
        <hash alg="SHA-512">fd8d26096ee029ee0461a118683547daebdf9687ecc67a8bf567698f9708999771b4adb4f6bc80c07f934e025b5dc1d96842c8d7006d99749fc6f4b09a3d1369</hash>
        <hash alg="SHA-384">064c35d846cb2188d65409b80be46f7b033a4eaa9ab15b7fe5b5e850ef21fceedf296ed6b7252900859b1f8c85f57590</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-json-basic</name>
      <version>3.5.8</version>
      <description>Apache CXF JAX-RS Extensions: JSON Basic</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4f75c2ea569d62c375d716622a4c4be</hash>
        <hash alg="SHA-1">127208017c9862a2d147629159c3feb53029a9b0</hash>
        <hash alg="SHA-256">f2dad3cdff07b334738092f076c8fe516cf0991461484c8914283e78afb44c69</hash>
        <hash alg="SHA-512">19802702e63670ede51dd85c5a8f5231366cc17a5e74d3ef79aae84772a0f80e4eda2948cf300af1e8e365c1dced90454f0cdd1fa90da5f6affeaab5eab0c11e</hash>
        <hash alg="SHA-384">1cfe9256bbcd57450549d8f62147f1303322e340e2136b63a25f386d6c89c5a0ecf4a20db9aecaaaf30d72da493c69cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-json-basic</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.5.8?type=bundle">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
  </dependencies>
</bom>
