{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:001e9bb8-2784-4384-91a3-224521654d92",
    "version": 1,
    "metadata": {
        "timestamp": "2026-09-22T09:20:33Z",
        "tools": {
            "components": [
                {
                    "type": "application",
                    "name": "php",
                    "version": "8.2.34"
                }
            ]
        },
        "component": {
            "type": "application",
            "bom-ref": "pkg:generic/php@8.2.34",
            "name": "php",
            "version": "8.2.34",
            "purl": "pkg:generic/php@8.2.34",
            "cpe": "cpe:2.3:a:php:php:8.2.34:*:*:*:*:*:*:*",
            "supplier": {
                "name": "PHP Group"
            },
            "licenses": [
                {
                    "license": {
                        "id": "PHP-3.01"
                    }
                }
            ],
            "properties": [
                {
                    "name": "php:dependency-sbom-status",
                    "value": "present"
                },
                {
                    "name": "php:artifact-file-name",
                    "value": "php-8.2.34-nts-Win32-vs16-x64.zip"
                },
                {
                    "name": "php:artifact-download-location",
                    "value": "https://downloads.php.net/~windows/releases/php-8.2.34-nts-Win32-vs16-x64.zip"
                },
                {
                    "name": "php:artifact-architecture",
                    "value": "x64"
                },
                {
                    "name": "php:artifact-thread-safety",
                    "value": "nts"
                },
                {
                    "name": "php:artifact-compiler",
                    "value": "vs16"
                }
            ],
            "copyright": "Copyright (c) 1999 - 2024 The PHP Group. All rights reserved.",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "03249b5c9414c6dbe30276f4a7598bd9d2a7417ee81f709b06b99e9c4a2aff4f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/releases/php-8.2.34-nts-Win32-vs16-x64.zip"
                }
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:generic/berkeley-uuencode",
            "name": "Berkeley uuencode",
            "version": "snapshot-25636b9321c2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/berkeley-uuencode",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause-UC"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/uuencode.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/boost-context-assembly",
            "name": "Boost.Context assembly",
            "version": "snapshot-20b96f6ebcd9",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/boost-context-assembly",
            "licenses": [
                {
                    "license": {
                        "id": "BSL-1.0"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "20b96f6ebcd9fe672464b5ff24d28eeb529afedd12fedc3fef835db5094621a8"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "Zend/asm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "20b96f6ebcd9fe672464b5ff24d28eeb529afedd12fedc3fef835db5094621a8"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/crypt_blowfish@1.3",
            "name": "crypt_blowfish",
            "version": "1.3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/crypt_blowfish@1.3",
            "licenses": [
                {
                    "license": {
                        "id": "bcrypt-Solar-Designer"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_blowfish.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/dynasm@1.5.0",
            "name": "DynASM",
            "version": "1.5.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/dynasm@1.5.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "75e0d7c7b8e447d60d9a6b99ee89d5184bb40d343bf4dad7cb38dd559a283c02"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/opcache/jit/dynasm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "75e0d7c7b8e447d60d9a6b99ee89d5184bb40d343bf4dad7cb38dd559a283c02"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/freesec-libcrypt",
            "name": "FreeSec libcrypt",
            "version": "snapshot-6b1d1d57b0af",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/freesec-libcrypt",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_freesec.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libarchive-format-octal",
            "name": "libarchive tar format_octal",
            "version": "snapshot-8c11b69535d7",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libarchive-format-octal",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "8c11b69535d74c9633c58fa2e038aaea8e75cec870b0ad12ba1f781136c312bf"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/tar.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "8c11b69535d74c9633c58fa2e038aaea8e75cec870b0ad12ba1f781136c312bf"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
            "name": "libavifinfo",
            "version": "96f34d945ac7dac229feddfa94dbae66e202b838",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a1d412355a34d294de9d736e1d64411b5eae62b501885f09e2dbacef45a7011b"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/libavifinfo"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "a1d412355a34d294de9d736e1d64411b5eae62b501885f09e2dbacef45a7011b"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libbcmath@0.2",
            "name": "libbcmath",
            "version": "0.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libbcmath@0.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3353b91facf62f28400a6199f05f14f65a9ac50c75f05a708bb732e157bead9b"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/bcmath/libbcmath"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "3353b91facf62f28400a6199f05f14f65a9ac50c75f05a708bb732e157bead9b"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libgd@2.0.35",
            "name": "libgd",
            "version": "2.0.35",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libgd@2.0.35",
            "licenses": [
                {
                    "license": {
                        "id": "GD"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7c02244eb8ea0d9823bb31f48bdfc304e10df2e6f6aa18daccde69a05de82df4"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/gd/libgd"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "7c02244eb8ea0d9823bb31f48bdfc304e10df2e6f6aa18daccde69a05de82df4"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmagic@5.40",
            "name": "libmagic",
            "version": "5.40",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmagic@5.40",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "87822d5ec46e290ce988f573062911ebf7f03849c8c188a54df5052f75977b41"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/fileinfo/libmagic"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "87822d5ec46e290ce988f573062911ebf7f03849c8c188a54df5052f75977b41"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmbfl@1.3.2",
            "name": "libmbfl",
            "version": "1.3.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmbfl@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e3fed9a73dbe85945e1f182dca3c8ba18c7207e8a4fb22b2ef07b876754252c5"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/libmbfl"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e3fed9a73dbe85945e1f182dca3c8ba18c7207e8a4fb22b2ef07b876754252c5"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libzip-zip-dirent",
            "name": "libzip zip_dirent",
            "version": "snapshot-350106a71b44",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libzip-zip-dirent",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "350106a71b44bb2c528bb7510669a9ff5172bfae51e196eecd3910c0b0086d0e"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/zip.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "350106a71b44bb2c528bb7510669a9ff5172bfae51e196eecd3910c0b0086d0e"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/mtrand@1.0",
            "name": "MTRand",
            "version": "1.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/mtrand@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "2b97e497f1bf0cc911ba0f5e97fe27a30ecb936e0760e055a35d3e4c314ba2a4"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/random/engine_mt19937.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "2b97e497f1bf0cc911ba0f5e97fe27a30ecb936e0760e055a35d3e4c314ba2a4"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openldap-ucgendat",
            "name": "OpenLDAP ucgendat",
            "version": "snapshot-3977da6ead0f",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/openldap-ucgendat",
            "licenses": [
                {
                    "expression": "OLDAP-2.8 AND MIT"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3977da6ead0fa8468124aed97f207f095b5e0cfbed01406522b9928b33824f42"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/ucgendat/ucgendat.php"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "3977da6ead0fa8468124aed97f207f095b5e0cfbed01406522b9928b33824f42"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2@10.40",
            "name": "pcre2lib",
            "version": "10.40",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/pcre2@10.40",
            "licenses": [
                {
                    "expression": "BSD-3-Clause WITH PCRE2-exception"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "9a138a5d8a26cfc54b4604ca95cd56eb1c389dc2772cbaa2b07c0ec4ba8618ce"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/pcre/pcre2lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "9a138a5d8a26cfc54b4604ca95cd56eb1c389dc2772cbaa2b07c0ec4ba8618ce"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/snprintf",
            "name": "snprintf",
            "version": "snapshot-7e283c124dc3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/snprintf",
            "licenses": [
                {
                    "expression": "ISC AND Apache-1.0"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7e283c124dc365d979b5e917678efa2ce18bf74ec2f3d0fce953dc70e208e3ad"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/snprintf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "7e283c124dc365d979b5e917678efa2ce18bf74ec2f3d0fce953dc70e208e3ad"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcat",
            "name": "strlcat",
            "version": "snapshot-d2244e6a54fe",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcat",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcat.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcpy",
            "name": "strlcpy",
            "version": "snapshot-144d697952d1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcpy",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcpy.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strnatcmp",
            "name": "strnatcmp",
            "version": "snapshot-e14f21965b39",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strnatcmp",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/strnatcmp.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/tcl-scanf@8.3.0",
            "name": "Tcl scanf implementation",
            "version": "8.3.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/tcl-scanf@8.3.0",
            "licenses": [
                {
                    "license": {
                        "id": "TCL"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/scanf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/timelib@2022.12",
            "name": "timelib",
            "version": "2022.12",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/timelib@2022.12",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ac31c21e32a8e34a4104406a0fd4ce93685230619a2bbb1f6850e8daa69fe6f3"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/date/lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "ac31c21e32a8e34a4104406a0fd4ce93685230619a2bbb1f6850e8daa69fe6f3"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xkcp-sha3",
            "name": "XKCP SHA-3",
            "version": "snapshot-aba3170bb6e1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xkcp-sha3",
            "licenses": [
                {
                    "expression": "CC0-1.0 AND Brian-Gladman-3-Clause"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/sha3"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xxhash@0.8.1",
            "name": "xxHash",
            "version": "0.8.1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xxhash@0.8.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "eed84bec690cf897913ef78090696aa4ab1c3de676f8c45b322fab844045ceb3"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.2.34 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/xxhash"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "eed84bec690cf897913ef78090696aa4ab1c3de676f8c45b322fab844045ceb3"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/ICU@71.1-2",
            "name": "ICU",
            "version": "71.1-2",
            "purl": "pkg:generic/icu@71.1",
            "licenses": [
                {
                    "license": {
                        "id": "Unicode-DFS-2016"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/ICU-71.1-2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/unicode-org/icu"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/unicode-org/icu/tree/release-71-1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/icu4c.git@38b181c5322d0d28ace5951eafc8308933e7cbd9"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "icu4c"
                },
                {
                    "name": "php:component",
                    "value": "ICU"
                },
                {
                    "name": "php:version",
                    "value": "71.1-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "71.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "unicode-org/icu"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/unicode-org/icu"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "release-71-1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/icu4c"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/icu4c"
                },
                {
                    "name": "php:source-ref",
                    "value": "icu4c-71.1-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "38b181c5322d0d28ace5951eafc8308933e7cbd9"
                },
                {
                    "name": "php:input-version",
                    "value": "icu4c-71.1-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "ICU-71.1-2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/ICU-71.1-2-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:ICU:71.1",
                        "name": "ICU",
                        "version": "71.1",
                        "purl": "pkg:generic/icu@71.1"
                    }
                ],
                "notes": "Built from winlibs/icu4c ref icu4c-71.1-2 at commit 38b181c5322d0d28ace5951eafc8308933e7cbd9 with upstream identity unicode-org/icu tag release-71-1. Preserve the existing CVE-2025-5222 genrb buffer hardening backport. Backport ICU-20715 to invalidate stale collation prefix/contraction contexts, including the upstream ICU4C regression test.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2025-5222",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5222"
                                },
                                "description": "icu4c-71.1-2 retains the CVE-2025-5222 genrb buffer hardening from icu4c-71.1-1.",
                                "references": [
                                    "https://github.com/winlibs/icu4c/commit/707e311c6c78efb721d431953c6f0f7df4ccb82b",
                                    "https://github.com/unicode-org/icu/commit/2c667e31cfd0b6bb1923627a932fd3453a5bac77",
                                    "https://github.com/unicode-org/icu/commit/76a06f2f03630a9e4a677f8ce4e4a7d36b425aa8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "OSV-2020-866",
                                "source": {
                                    "name": "OSV",
                                    "url": "https://osv.dev/vulnerability/OSV-2020-866"
                                },
                                "description": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values.",
                                "references": [
                                    "https://github.com/winlibs/icu4c/commit/38b181c5322d0d28ace5951eafc8308933e7cbd9",
                                    "https://github.com/unicode-org/icu/commit/4833cc89b2fae2e8863b46bf1dc785964847e882",
                                    "https://github.com/unicode-org/icu/pull/2052"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "OSV-2020-867",
                                "source": {
                                    "name": "OSV",
                                    "url": "https://osv.dev/vulnerability/OSV-2020-867"
                                },
                                "description": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values.",
                                "references": [
                                    "https://github.com/winlibs/icu4c/commit/38b181c5322d0d28ace5951eafc8308933e7cbd9",
                                    "https://github.com/unicode-org/icu/commit/4833cc89b2fae2e8863b46bf1dc785964847e882",
                                    "https://github.com/unicode-org/icu/pull/2052"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "OSV-2021-1236",
                                "source": {
                                    "name": "OSV",
                                    "url": "https://osv.dev/vulnerability/OSV-2021-1236"
                                },
                                "description": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values.",
                                "references": [
                                    "https://github.com/winlibs/icu4c/commit/38b181c5322d0d28ace5951eafc8308933e7cbd9",
                                    "https://github.com/unicode-org/icu/commit/4833cc89b2fae2e8863b46bf1dc785964847e882",
                                    "https://github.com/unicode-org/icu/pull/2052"
                                ]
                            }
                        ]
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/icu4c/commit/707e311c6c78efb721d431953c6f0f7df4ccb82b"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/icu4c/commit/38b181c5322d0d28ace5951eafc8308933e7cbd9"
                        }
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apache@2.4.68",
            "name": "apache",
            "version": "2.4.68",
            "purl": "pkg:generic/apache-httpd@2.4.68",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/apache-2.4.68-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/apache/httpd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/httpd/tree/2.4.68"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/apache/httpd.git@736bb657405eb73fd68a64772c3a908807bdb887"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "apache"
                },
                {
                    "name": "php:component",
                    "value": "apache"
                },
                {
                    "name": "php:version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:source-ref",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-commit",
                    "value": "736bb657405eb73fd68a64772c3a908807bdb887"
                },
                {
                    "name": "php:input-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "apache-2.4.68-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/apache-2.4.68-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:apache:http_server:2.4.68:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-x64-windows@03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad",
            "name": "apr:x64-windows",
            "version": "03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-x64-windows@8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677",
            "name": "openssl:x64-windows",
            "version": "8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-1.6.3.tar.bz2@1.6.3",
            "name": "apr-util-1.6.3.tar.bz2",
            "version": "1.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/curl",
            "name": "curl",
            "version": "8.21.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/curl",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/brotli-x64-windows@45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426",
            "name": "brotli:x64-windows",
            "version": "45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-openssl@3.6.3",
            "name": "openssl/openssl",
            "version": "3.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "openssl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "name": "apr-util",
            "version": "1.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2-x64-windows@1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc",
            "name": "pcre2:x64-windows",
            "version": "1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-5.5.0.tar.gz@5.5.0",
            "name": "lua-5.5.0.tar.gz",
            "version": "5.5.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Lua.org"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/zlib",
            "name": "zlib",
            "version": "1.3.2#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/zlib",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-nghttp2@1.69.0",
            "name": "nghttp2/nghttp2",
            "version": "1.69.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "nghttp2"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-x64-windows@1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676",
            "name": "nghttp2:x64-windows",
            "version": "1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/expat",
            "name": "expat",
            "version": "2.8.2",
            "purl": "pkg:github/microsoft/vcpkg#ports/expat",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "name": "apr-iconv",
            "version": "1.2.2",
            "purl": "pkg:generic/apr-iconv@1.2.2",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/apache/apr-iconv"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/apr-iconv/tree/1.2.2"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "apr-iconv-source/apr-iconv-1.2.2"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/apr-iconv"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/apr-iconv"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.2.2"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-x64-windows@c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd",
            "name": "apr-util:x64-windows",
            "version": "c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-curl@8.21.0",
            "name": "curl/curl",
            "version": "8.21.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "curl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-x64-windows@e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676",
            "name": "lua:x64-windows",
            "version": "e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/akheron-jansson@2.15.1",
            "name": "akheron/jansson",
            "version": "2.15.1",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "akheron"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/lua",
            "name": "lua",
            "version": "5.5.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/lua",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "name": "nghttp2",
            "version": "1.69.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/google-brotli@1.2.0",
            "name": "google/brotli",
            "version": "1.2.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "google"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/jansson-x64-windows@678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4",
            "name": "jansson:x64-windows",
            "version": "678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zherczeg-sljit@45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "name": "zherczeg/sljit",
            "version": "45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "licenses": [
                {
                    "expression": "BSD-2-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Zoltan Herczeg"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/brotli",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/brotli",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/expat-x64-windows@c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6",
            "name": "expat:x64-windows",
            "version": "c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/madler-zlib@1.3.2",
            "name": "madler/zlib",
            "version": "1.3.2",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "madler"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-x64-windows@ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e",
            "name": "curl:x64-windows",
            "version": "ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/PCRE2Project-pcre2@10.47",
            "name": "PCRE2Project/pcre2",
            "version": "10.47",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PCRE2Project"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr",
            "name": "apr",
            "version": "1.7.6#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-1.7.6.tar.bz2@1.7.6",
            "name": "apr-1.7.6.tar.bz2",
            "version": "1.7.6",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "name": "pcre2",
            "version": "10.47#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/jansson",
            "name": "jansson",
            "version": "2.15.1",
            "purl": "pkg:github/microsoft/vcpkg#ports/jansson",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libexpat-libexpat@2.8.2",
            "name": "libexpat/libexpat",
            "version": "2.8.2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "libexpat"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/openssl",
            "name": "openssl",
            "version": "3.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/openssl",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zlib-x64-windows@5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b",
            "name": "zlib:x64-windows",
            "version": "5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/brotli@1.2.0",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:generic/brotli@1.2.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/brotli-1.2.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/google/brotli"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/brotli/tree/v1.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/google/brotli.git@028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "brotli"
                },
                {
                    "name": "php:component",
                    "value": "brotli"
                },
                {
                    "name": "php:version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "028fb5a23661f123017c060daa546b55cf4bde29"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "brotli-1.2.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/brotli-1.2.0-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:google:brotli:1.2.0:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/c-client@2007f-1",
            "name": "c-client",
            "version": "2007f-1",
            "purl": "pkg:generic/c-client@2007f",
            "licenses": [
                {
                    "expression": "Apache-2.0 AND BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/c-client-2007f-1-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/winlibs/imap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/winlibs/imap/tree/imap-2007f"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/imap.git@4f5969e9dd677122f30416de044576644f612c71"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "imap"
                },
                {
                    "name": "php:component",
                    "value": "c-client"
                },
                {
                    "name": "php:version",
                    "value": "2007f-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2007f"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "winlibs/imap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/winlibs/imap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "imap-2007f"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/imap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/imap"
                },
                {
                    "name": "php:source-ref",
                    "value": "imap-2007f-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "4f5969e9dd677122f30416de044576644f612c71"
                },
                {
                    "name": "php:input-version",
                    "value": "imap-2007f-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "c-client-2007f-1-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/c-client-2007f-1-vs16-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/fbclient@3.0.14",
            "name": "fbclient",
            "version": "3.0.14",
            "purl": "pkg:generic/firebird@3.0.14",
            "licenses": [
                {
                    "expression": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/fbclient-3.0.14-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FirebirdSQL/firebird/tree/v3.0.14"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "fbclient"
                },
                {
                    "name": "php:component",
                    "value": "fbclient"
                },
                {
                    "name": "php:version",
                    "value": "3.0.14"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.14"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:source-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:input-version",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "fbclient-3.0.14-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/fbclient-3.0.14-vs16-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/freetype@2.14.3",
            "name": "freetype",
            "version": "2.14.3",
            "purl": "pkg:generic/freetype@2.14.3",
            "licenses": [
                {
                    "expression": "FTL OR GPL-2.0-or-later"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/freetype-2.14.3-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/freetype/freetype"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/freetype/freetype/tree/VER-2-14-3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/freetype.git@3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "freetype"
                },
                {
                    "name": "php:component",
                    "value": "freetype"
                },
                {
                    "name": "php:version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "freetype/freetype"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/freetype/freetype"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "VER-2-14-3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/freetype"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/freetype"
                },
                {
                    "name": "php:source-ref",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                },
                {
                    "name": "php:input-version",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "freetype-2.14.3-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/freetype-2.14.3-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:freetype:freetype:2.14.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:freetype:2.14.3",
                        "name": "freetype",
                        "version": "2.14.3",
                        "purl": "pkg:generic/freetype@2.14.3"
                    }
                ],
                "notes": "Built from winlibs/freetype ref freetype-2.14.3 at commit 3d8e776a1f1800dea07d433e20c91e8a9a161c4f with upstream identity freetype/freetype tag VER-2-14-3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/glib@2.88.3",
            "name": "glib",
            "version": "2.88.3",
            "purl": "pkg:generic/glib@2.88.3",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/glib-2.88.3-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/glib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/glib/tree/2.88.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/glib.git@ca9d6adf53e11099045a6d51116dd0b678faa1f3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "glib"
                },
                {
                    "name": "php:component",
                    "value": "glib"
                },
                {
                    "name": "php:version",
                    "value": "2.88.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.88.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/glib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/glib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.88.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/glib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/glib"
                },
                {
                    "name": "php:source-ref",
                    "value": "glib-2.88.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "ca9d6adf53e11099045a6d51116dd0b678faa1f3"
                },
                {
                    "name": "php:input-version",
                    "value": "glib-2.88.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "glib-2.88.3-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/glib-2.88.3-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:gnome:glib:2.88.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:glib:2.88.3",
                        "name": "glib",
                        "version": "2.88.3",
                        "purl": "pkg:generic/glib@2.88.3"
                    }
                ],
                "notes": "Built from winlibs/glib ref glib-2.88.3 at commit ca9d6adf53e11099045a6d51116dd0b678faa1f3 with upstream identity GNOME/glib tag 2.88.3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libffi@3.8.0",
            "name": "libffi",
            "version": "3.8.0",
            "purl": "pkg:generic/libffi@3.8.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libffi-3.8.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libffi/libffi"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libffi/libffi/tree/v3.8.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libffi.git@30ae078e9dbf2cb36de5db54b9740e89d8ff52e1"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libffi"
                },
                {
                    "name": "php:component",
                    "value": "libffi"
                },
                {
                    "name": "php:version",
                    "value": "3.8.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.8.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libffi/libffi"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libffi/libffi"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.8.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libffi"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libffi"
                },
                {
                    "name": "php:source-ref",
                    "value": "libffi-3.8.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "30ae078e9dbf2cb36de5db54b9740e89d8ff52e1"
                },
                {
                    "name": "php:input-version",
                    "value": "libffi-3.8.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libffi-3.8.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libffi-3.8.0-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libffi:3.8.0",
                        "name": "libffi",
                        "version": "3.8.0",
                        "purl": "pkg:generic/libffi@3.8.0"
                    }
                ],
                "notes": "Built from winlibs/libffi ref libffi-3.8.0 at commit 30ae078e9dbf2cb36de5db54b9740e89d8ff52e1 with upstream identity libffi/libffi tag v3.8.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libintl@1.0",
            "name": "libintl",
            "version": "1.0",
            "purl": "pkg:generic/gettext@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libintl-1.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/gettext.git@cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "gettext"
                },
                {
                    "name": "php:component",
                    "value": "libintl"
                },
                {
                    "name": "php:version",
                    "value": "1.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/gettext"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/gettext"
                },
                {
                    "name": "php:source-ref",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "cd6fcaeffc493305f9c0081310efa0e063060da6"
                },
                {
                    "name": "php:input-version",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libintl-1.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libintl-1.0-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libintl:1.0",
                        "name": "libintl",
                        "version": "1.0",
                        "purl": "pkg:generic/gettext@1.0"
                    }
                ],
                "notes": "Built from winlibs/gettext ref libintl-1.0 at commit cd6fcaeffc493305f9c0081310efa0e063060da6 with upstream identity https://git.savannah.gnu.org/git/gettext.git tag v1.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/zlib@1.3.2",
            "name": "zlib",
            "version": "1.3.2",
            "purl": "pkg:generic/zlib@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/zlib-1.3.2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/madler/zlib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/madler/zlib/tree/v1.3.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/zlib.git@0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "zlib"
                },
                {
                    "name": "php:component",
                    "value": "zlib"
                },
                {
                    "name": "php:version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "madler/zlib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/madler/zlib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.3.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/zlib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/zlib"
                },
                {
                    "name": "php:source-ref",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "0089522e62e6b5d4950e62bd20f0cb06a9288413"
                },
                {
                    "name": "php:input-version",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "zlib-1.3.2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/zlib-1.3.2-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:zlib:1.3.2",
                        "name": "zlib",
                        "version": "1.3.2",
                        "purl": "pkg:generic/zlib@1.3.2"
                    }
                ],
                "notes": "Built from winlibs/zlib ref zlib-1.3.2 at commit 0089522e62e6b5d4950e62bd20f0cb06a9288413 with upstream identity madler/zlib tag v1.3.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libargon2@20190702",
            "name": "libargon2",
            "version": "20190702",
            "purl": "pkg:generic/libargon2@20190702",
            "licenses": [
                {
                    "license": {
                        "id": "CC0-1.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libargon2-20190702-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/P-H-C/phc-winner-argon2/tree/20190702"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/argon2.git@fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "argon2"
                },
                {
                    "name": "php:component",
                    "value": "libargon2"
                },
                {
                    "name": "php:version",
                    "value": "20190702"
                },
                {
                    "name": "php:upstream-version",
                    "value": "20190702"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "20190702"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/argon2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/argon2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:source-commit",
                    "value": "fb53ef37be212380d51877b70f514f3bf2c1ee40"
                },
                {
                    "name": "php:input-version",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.3"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libargon2-20190702-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libargon2-20190702-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libargon2:20190702",
                        "name": "libargon2",
                        "version": "20190702",
                        "purl": "pkg:generic/libargon2@20190702"
                    }
                ],
                "notes": "Built from winlibs/argon2 ref libargon2-20190702 at commit fb53ef37be212380d51877b70f514f3bf2c1ee40 with upstream identity P-H-C/phc-winner-argon2 tag 20190702."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libavif@1.4.2",
            "name": "libavif",
            "version": "1.4.2",
            "purl": "pkg:generic/libavif@1.4.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libavif-1.4.2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AOMediaCodec/libavif/tree/v1.4.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libavif.git@14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libavif"
                },
                {
                    "name": "php:component",
                    "value": "libavif"
                },
                {
                    "name": "php:version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.4.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libavif"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libavif"
                },
                {
                    "name": "php:source-ref",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "14976153789c7ebf2ca24b22215a964bbc5be213"
                },
                {
                    "name": "php:input-version",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libavif-1.4.2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libavif-1.4.2-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libavif:1.4.2",
                        "name": "libavif",
                        "version": "1.4.2",
                        "purl": "pkg:generic/libavif@1.4.2"
                    }
                ],
                "notes": "Built from winlibs/libavif ref libavif-1.4.2 at commit 14976153789c7ebf2ca24b22215a964bbc5be213 with upstream identity AOMediaCodec/libavif tag v1.4.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/aom@3.14.1",
            "name": "aom",
            "version": "3.14.1",
            "purl": "pkg:generic/aom@3.14.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://aomedia.googlesource.com/aom"
                },
                {
                    "type": "vcs",
                    "url": "https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://aomedia.googlesource.com/aom.git@03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libavif/ext/aom"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libbzip2@1.0.8",
            "name": "libbzip2",
            "version": "1.0.8",
            "purl": "pkg:generic/bzip2@1.0.8",
            "licenses": [
                {
                    "license": {
                        "id": "bzip2-1.0.6"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libbzip2-1.0.8-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libarchive/bzip2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libarchive/bzip2/tree/bzip2-1.0.8"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libbzip2.git@f131eb16809565cbeb0684ecad2bd20130e7d5a1"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libbzip2"
                },
                {
                    "name": "php:component",
                    "value": "libbzip2"
                },
                {
                    "name": "php:version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libarchive/bzip2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libarchive/bzip2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "bzip2-1.0.8"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libbzip2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libbzip2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libbzip2-1.0.8"
                },
                {
                    "name": "php:source-commit",
                    "value": "f131eb16809565cbeb0684ecad2bd20130e7d5a1"
                },
                {
                    "name": "php:input-version",
                    "value": "libbzip2-1.0.8"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libbzip2-1.0.8-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libbzip2-1.0.8-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libbzip2:1.0.8",
                        "name": "libbzip2",
                        "version": "1.0.8",
                        "purl": "pkg:generic/bzip2@1.0.8"
                    }
                ],
                "notes": "Built from winlibs/libbzip2 ref libbzip2-1.0.8 at commit f131eb16809565cbeb0684ecad2bd20130e7d5a1 with upstream identity libarchive/bzip2 tag bzip2-1.0.8."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libcurl@8.22.0",
            "name": "libcurl",
            "version": "8.22.0",
            "purl": "pkg:generic/curl@8.22.0",
            "licenses": [
                {
                    "license": {
                        "id": "curl"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libcurl-8.22.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/curl/curl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/curl/curl/tree/curl-8_22_0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/curl.git@e4dd89bce50940c78fd32c70ffe31c102a6ce69f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "curl"
                },
                {
                    "name": "php:component",
                    "value": "libcurl"
                },
                {
                    "name": "php:version",
                    "value": "8.22.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "8.22.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "curl/curl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/curl/curl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "curl-8_22_0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/curl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/curl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libcurl-8.22.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "e4dd89bce50940c78fd32c70ffe31c102a6ce69f"
                },
                {
                    "name": "php:input-version",
                    "value": "libcurl-8.22.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libcurl-8.22.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libcurl-8.22.0-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libcurl:8.22.0",
                        "name": "libcurl",
                        "version": "8.22.0",
                        "purl": "pkg:generic/curl@8.22.0"
                    }
                ],
                "notes": "Built from winlibs/curl ref libcurl-8.22.0 at commit e4dd89bce50940c78fd32c70ffe31c102a6ce69f with upstream identity curl/curl tag curl-8_22_0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libssh2@1.11.1-6",
            "name": "libssh2",
            "version": "1.11.1-6",
            "purl": "pkg:generic/libssh2@1.11.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libssh2-1.11.1-6-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libssh2/libssh2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libssh2/libssh2/tree/libssh2-1.11.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libssh2.git@7817741ff29d52165b0e8c157acbe4c0ec582117"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libssh2"
                },
                {
                    "name": "php:component",
                    "value": "libssh2"
                },
                {
                    "name": "php:version",
                    "value": "1.11.1-6"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libssh2/libssh2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libssh2/libssh2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libssh2-1.11.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libssh2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libssh2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libssh2-1.11.1-6"
                },
                {
                    "name": "php:source-commit",
                    "value": "7817741ff29d52165b0e8c157acbe4c0ec582117"
                },
                {
                    "name": "php:input-version",
                    "value": "libssh2-1.11.1-6"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libssh2-1.11.1-6-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libssh2-1.11.1-6-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libssh2:libssh2:1.11.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libssh2:1.11.1",
                        "name": "libssh2",
                        "version": "1.11.1",
                        "purl": "pkg:generic/libssh2@1.11.1"
                    }
                ],
                "notes": "Built from winlibs/libssh2 ref libssh2-1.11.1-6 at commit 7817741ff29d52165b0e8c157acbe4c0ec582117 with upstream identity libssh2/libssh2 tag libssh2-1.11.1.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-7598",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
                                },
                                "description": "Fixed by backporting upstream username_len bounds checking in src/userauth.c.",
                                "references": [
                                    "https://github.com/libssh2/libssh2/pull/1858",
                                    "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-15661",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
                                },
                                "description": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/94726036b0d5abec38dfec6202270c5b4d0021dc",
                                    "https://github.com/libssh2/libssh2/commit/2dae3024897e1898d389835151f4e9606227721d",
                                    "https://github.com/libssh2/libssh2/commit/4ed26f5740bdd409269ed9fb48a28bf8f565b681"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55199",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
                                },
                                "description": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f6732df726b0e187f0ab6c4d538b7e5e5307439c",
                                    "https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55200",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
                                },
                                "description": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f2abc265e35792e3c86752c9f12682a1fb0d4a01",
                                    "https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58050",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
                                },
                                "description": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/103972c538a11e5ae571f6126657e1baefccc415",
                                    "https://github.com/libssh2/libssh2/commit/34497525929b9a47f03dfb81887ac896202b7e12"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58051",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
                                },
                                "description": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/97e8f0143a55b66df60a695678433ccbe24291f0",
                                    "https://github.com/libssh2/libssh2/commit/a9758da45a52bc8c630ec9493804d0c6ea30b24a"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-66032",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66032"
                                },
                                "description": "Fixed by backporting the upstream nullification of freed SFTP response data in src/sftp.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/47d1da2a772ac215ec0d29832e13073164e7084a",
                                    "https://github.com/libssh2/libssh2/commit/5e4776146552d898b9c0e1b313cd093fa8dc92d0"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-66033",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66033"
                                },
                                "description": "Fixed by backporting the upstream runtime bounds checks for AES-GCM block processing in src/openssl.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/9f6cd27379c44b22918d848f1f81ca6f7bda19c5",
                                    "https://github.com/libssh2/libssh2/commit/a2ed82d40964bbc0d64cd717aa0a5a892117d2e6"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-66034",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66034"
                                },
                                "description": "Fixed by backporting the upstream bounds checking for public-key comment lengths in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/407867a7365f61a0c5dba9fbfed0e30f2b0337d3",
                                    "https://github.com/libssh2/libssh2/commit/a13bb6c773f0d55ad1628cede57e99803cd898d9"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-66035",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66035"
                                },
                                "description": "Fixed by backporting the upstream lower-bound validation for Encrypt-then-MAC packet decryption in src/transport.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/7817741ff29d52165b0e8c157acbe4c0ec582117",
                                    "https://github.com/libssh2/libssh2/commit/42e33d81577ed4b95d4b4f6f845e5ee8efe5eeb4"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "name": "libzstd",
            "version": "1.5.7",
            "purl": "pkg:generic/zstd@1.5.7",
            "licenses": [
                {
                    "expression": "BSD-3-Clause OR GPL-2.0-only"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libzstd-1.5.7-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/facebook/zstd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/facebook/zstd/tree/v1.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/facebook/zstd.git@f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzstd"
                },
                {
                    "name": "php:component",
                    "value": "libzstd"
                },
                {
                    "name": "php:version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzstd-1.5.7-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libzstd-1.5.7-vs16-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/nghttp2@1.70.0",
            "name": "nghttp2",
            "version": "1.70.0",
            "purl": "pkg:generic/nghttp2@1.70.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/nghttp2-1.70.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nghttp2/nghttp2/tree/v1.70.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/nghttp2.git@50895b5f3cebeb2553a4e40a62561707a1a129e0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "nghttp2"
                },
                {
                    "name": "php:component",
                    "value": "nghttp2"
                },
                {
                    "name": "php:version",
                    "value": "1.70.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.70.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.70.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/nghttp2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/nghttp2"
                },
                {
                    "name": "php:source-ref",
                    "value": "nghttp2-1.70.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "50895b5f3cebeb2553a4e40a62561707a1a129e0"
                },
                {
                    "name": "php:input-version",
                    "value": "nghttp2-1.70.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "nghttp2-1.70.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/nghttp2-1.70.0-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:nghttp2:nghttp2:1.70.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:nghttp2:1.70.0",
                        "name": "nghttp2",
                        "version": "1.70.0",
                        "purl": "pkg:generic/nghttp2@1.70.0"
                    }
                ],
                "notes": "Built from winlibs/nghttp2 ref nghttp2-1.70.0 at commit 50895b5f3cebeb2553a4e40a62561707a1a129e0 with upstream identity nghttp2/nghttp2 tag v1.70.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openssl@3.0.22.pl1",
            "name": "openssl",
            "version": "3.0.22.pl1",
            "purl": "pkg:generic/openssl@3.0.22",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/openssl-3.0.22.pl1-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openssl/openssl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openssl/openssl/tree/openssl-3.0.22"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openssl.git@8b89dd78b48339632e3f655b030290a0f9484bb4"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openssl"
                },
                {
                    "name": "php:component",
                    "value": "openssl"
                },
                {
                    "name": "php:version",
                    "value": "3.0.22.pl1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.22"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openssl/openssl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openssl/openssl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "openssl-3.0.22"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openssl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openssl"
                },
                {
                    "name": "php:source-ref",
                    "value": "openssl-3.0.22.pl1"
                },
                {
                    "name": "php:source-commit",
                    "value": "8b89dd78b48339632e3f655b030290a0f9484bb4"
                },
                {
                    "name": "php:input-version",
                    "value": "openssl-3.0.22.pl1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openssl-3.0.22.pl1-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/openssl-3.0.22.pl1-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openssl:openssl:3.0.22:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openssl:3.0.22",
                        "name": "openssl",
                        "version": "3.0.22",
                        "purl": "pkg:generic/openssl@3.0.22"
                    }
                ],
                "notes": "Built from winlibs/openssl ref openssl-3.0.22.pl1 at commit 8b89dd78b48339632e3f655b030290a0f9484bb4 with upstream identity openssl/openssl tag openssl-3.0.22. Backport Ubuntu's PKCS#1 implicit-rejection patch.",
                "patches": [
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/openssl/commit/8b89dd78b48339632e3f655b030290a0f9484bb4"
                        }
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libenchant2@2.8.19",
            "name": "libenchant2",
            "version": "2.8.19",
            "purl": "pkg:generic/enchant@2.8.19",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libenchant2-2.8.19-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AbiWord/enchant"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AbiWord/enchant/tree/v2.8.19"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/enchant.git@37e09ab3d76d61784d8a9d4cca2badbd56d080f4"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "enchant"
                },
                {
                    "name": "php:component",
                    "value": "libenchant2"
                },
                {
                    "name": "php:version",
                    "value": "2.8.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.8.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AbiWord/enchant"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AbiWord/enchant"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.8.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/enchant"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/enchant"
                },
                {
                    "name": "php:source-ref",
                    "value": "libenchant2-2.8.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "37e09ab3d76d61784d8a9d4cca2badbd56d080f4"
                },
                {
                    "name": "php:input-version",
                    "value": "libenchant2-2.8.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libenchant2-2.8.19-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libenchant2-2.8.19-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libenchant2:2.8.19",
                        "name": "libenchant2",
                        "version": "2.8.19",
                        "purl": "pkg:generic/enchant@2.8.19"
                    }
                ],
                "notes": "Built from winlibs/enchant ref libenchant2-2.8.19 at commit 37e09ab3d76d61784d8a9d4cca2badbd56d080f4 with upstream identity AbiWord/enchant tag v2.8.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libiconv@1.19",
            "name": "libiconv",
            "version": "1.19",
            "purl": "pkg:generic/libiconv@1.19",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libiconv-1.19-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libiconv.git@8f55a0aa6532f30f947261d90e72b200f350a5df"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libiconv"
                },
                {
                    "name": "php:component",
                    "value": "libiconv"
                },
                {
                    "name": "php:version",
                    "value": "1.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libiconv"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libiconv"
                },
                {
                    "name": "php:source-ref",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "8f55a0aa6532f30f947261d90e72b200f350a5df"
                },
                {
                    "name": "php:input-version",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libiconv-1.19-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libiconv-1.19-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libiconv:1.19",
                        "name": "libiconv",
                        "version": "1.19",
                        "purl": "pkg:generic/libiconv@1.19"
                    }
                ],
                "notes": "Built from winlibs/libiconv ref libiconv-1.19 at commit 8f55a0aa6532f30f947261d90e72b200f350a5df with upstream identity https://git.savannah.gnu.org/git/libiconv.git tag v1.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjpeg-turbo@3.2.0",
            "name": "libjpeg-turbo",
            "version": "3.2.0",
            "purl": "pkg:generic/libjpeg-turbo@3.2.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND IJG"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libjpeg-turbo-3.2.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libjpeg.git@66ef88ad97f3c47eb1c7b85f2637ff1073ebce9b"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libjpeg"
                },
                {
                    "name": "php:component",
                    "value": "libjpeg-turbo"
                },
                {
                    "name": "php:version",
                    "value": "3.2.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.2.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "3.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libjpeg"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libjpeg"
                },
                {
                    "name": "php:source-ref",
                    "value": "libjpeg-turbo-3.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "66ef88ad97f3c47eb1c7b85f2637ff1073ebce9b"
                },
                {
                    "name": "php:input-version",
                    "value": "libjpeg-turbo-3.2.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libjpeg-turbo-3.2.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libjpeg-turbo-3.2.0-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:3.2.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libjpeg-turbo:3.2.0",
                        "name": "libjpeg-turbo",
                        "version": "3.2.0",
                        "purl": "pkg:generic/libjpeg-turbo@3.2.0"
                    }
                ],
                "notes": "Built from winlibs/libjpeg ref libjpeg-turbo-3.2.0 at commit 66ef88ad97f3c47eb1c7b85f2637ff1073ebce9b with upstream identity libjpeg-turbo/libjpeg-turbo tag 3.2.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "name": "liblmdb",
            "version": "0.9.35",
            "purl": "pkg:generic/lmdb@0.9.35",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/liblmdb-0.9.35-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/LMDB/lmdb"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/LMDB/lmdb/tree/LMDB_0.9.35"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/lmdb.git@337459047d55fbf52e634bc26285195d06ac145d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "lmdb"
                },
                {
                    "name": "php:component",
                    "value": "liblmdb"
                },
                {
                    "name": "php:version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:upstream-version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "LMDB/lmdb"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/LMDB/lmdb"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "LMDB_0.9.35"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/lmdb"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/lmdb"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:source-commit",
                    "value": "337459047d55fbf52e634bc26285195d06ac145d"
                },
                {
                    "name": "php:input-version",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblmdb-0.9.35-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/liblmdb-0.9.35-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblmdb:0.9.35",
                        "name": "liblmdb",
                        "version": "0.9.35",
                        "purl": "pkg:generic/lmdb@0.9.35"
                    }
                ],
                "notes": "Built from winlibs/lmdb ref liblmdb-0.9.35 at commit 337459047d55fbf52e634bc26285195d06ac145d with upstream identity LMDB/lmdb tag LMDB_0.9.35."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblzma@5.8.4",
            "name": "liblzma",
            "version": "5.8.4",
            "purl": "pkg:generic/xz@5.8.4",
            "licenses": [
                {
                    "license": {
                        "id": "0BSD"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/liblzma-5.8.4-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/tukaani-project/xz"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/tukaani-project/xz/tree/v5.8.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/liblzma.git@4b9d0346008efc136ea6c407d9c23da47727fe3b"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "liblzma"
                },
                {
                    "name": "php:component",
                    "value": "liblzma"
                },
                {
                    "name": "php:version",
                    "value": "5.8.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "tukaani-project/xz"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/tukaani-project/xz"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.8.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/liblzma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/liblzma"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblzma-5.8.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "4b9d0346008efc136ea6c407d9c23da47727fe3b"
                },
                {
                    "name": "php:input-version",
                    "value": "liblzma-5.8.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblzma-5.8.4-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/liblzma-5.8.4-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblzma:5.8.4",
                        "name": "liblzma",
                        "version": "5.8.4",
                        "purl": "pkg:generic/xz@5.8.4"
                    }
                ],
                "notes": "Built from winlibs/liblzma ref liblzma-5.8.4 at commit 4b9d0346008efc136ea6c407d9c23da47727fe3b with upstream identity tukaani-project/xz tag v5.8.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libonig@6.9.10",
            "name": "libonig",
            "version": "6.9.10",
            "purl": "pkg:generic/oniguruma@6.9.10",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libonig-6.9.10-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/kkos/oniguruma"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/kkos/oniguruma/tree/v6.9.10"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/oniguruma.git@fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "oniguruma"
                },
                {
                    "name": "php:component",
                    "value": "libonig"
                },
                {
                    "name": "php:version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:upstream-version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "kkos/oniguruma"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/kkos/oniguruma"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v6.9.10"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/oniguruma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/oniguruma"
                },
                {
                    "name": "php:source-ref",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:source-commit",
                    "value": "fceeeffdb609661ffaea9be4075c6ff4d6696611"
                },
                {
                    "name": "php:input-version",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libonig-6.9.10-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libonig-6.9.10-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libonig:6.9.10",
                        "name": "libonig",
                        "version": "6.9.10",
                        "purl": "pkg:generic/oniguruma@6.9.10"
                    }
                ],
                "notes": "Built from winlibs/oniguruma ref libonig-6.9.10 at commit fceeeffdb609661ffaea9be4075c6ff4d6696611 with upstream identity kkos/oniguruma tag v6.9.10."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpng@1.6.58",
            "name": "libpng",
            "version": "1.6.58",
            "purl": "pkg:generic/libpng@1.6.58",
            "licenses": [
                {
                    "license": {
                        "id": "libpng-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libpng-1.6.58-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/pnggroup/libpng"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/pnggroup/libpng/tree/v1.6.58"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libpng.git@5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libpng"
                },
                {
                    "name": "php:component",
                    "value": "libpng"
                },
                {
                    "name": "php:version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "pnggroup/libpng"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/pnggroup/libpng"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.58"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libpng"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libpng"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:source-commit",
                    "value": "5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                },
                {
                    "name": "php:input-version",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpng-1.6.58-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libpng-1.6.58-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libpng:libpng:1.6.58:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpng:1.6.58",
                        "name": "libpng",
                        "version": "1.6.58",
                        "purl": "pkg:generic/libpng@1.6.58"
                    }
                ],
                "notes": "Built from winlibs/libpng ref libpng-1.6.58 at commit 5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896 with upstream identity pnggroup/libpng tag v1.6.58."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpq@14.24",
            "name": "libpq",
            "version": "14.24",
            "purl": "pkg:generic/postgresql@14.24",
            "licenses": [
                {
                    "license": {
                        "id": "PostgreSQL"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libpq-14.24-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/postgres/postgres"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/postgres/postgres/tree/REL_14_24"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/postgresql.git@d6d085e9377626a66c10144123ad67f0ca42f62d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "postgresql"
                },
                {
                    "name": "php:component",
                    "value": "libpq"
                },
                {
                    "name": "php:version",
                    "value": "14.24"
                },
                {
                    "name": "php:upstream-version",
                    "value": "14.24"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "postgres/postgres"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/postgres/postgres"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "REL_14_24"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/postgresql"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/postgresql"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpq-14.24"
                },
                {
                    "name": "php:source-commit",
                    "value": "d6d085e9377626a66c10144123ad67f0ca42f62d"
                },
                {
                    "name": "php:input-version",
                    "value": "libpq-14.24"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpq-14.24-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libpq-14.24-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:postgresql:postgresql:14.24:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpq:14.24",
                        "name": "libpq",
                        "version": "14.24",
                        "purl": "pkg:generic/postgresql@14.24"
                    }
                ],
                "notes": "Built from winlibs/postgresql ref libpq-14.24 at commit d6d085e9377626a66c10144123ad67f0ca42f62d with upstream identity postgres/postgres tag REL_14_24."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "name": "libqdbm",
            "version": "1.8.78",
            "purl": "pkg:generic/qdbm@1.8.78",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libqdbm-1.8.78-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/qdbm.git@586aa477ff42f0d307dc26adada275642630b28f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "qdbm"
                },
                {
                    "name": "php:component",
                    "value": "libqdbm"
                },
                {
                    "name": "php:version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://dbmx.net/qdbm/"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "qdbm-1.8.78"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/qdbm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/qdbm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:source-commit",
                    "value": "586aa477ff42f0d307dc26adada275642630b28f"
                },
                {
                    "name": "php:input-version",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libqdbm-1.8.78-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libqdbm-1.8.78-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libqdbm:1.8.78",
                        "name": "libqdbm",
                        "version": "1.8.78",
                        "purl": "pkg:generic/qdbm@1.8.78"
                    }
                ],
                "notes": "Built from winlibs/qdbm ref libqdbm-1.8.78 at commit 586aa477ff42f0d307dc26adada275642630b28f with upstream identity https://dbmx.net/qdbm/ tag qdbm-1.8.78."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "name": "libsasl",
            "version": "2.1.28",
            "purl": "pkg:generic/cyrus-sasl@2.1.28",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libsasl-2.1.28-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/cyrusimap/cyrus-sasl/tree/cyrus-sasl-2.1.28"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/cyrus-sasl.git@63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "cyrus-sasl"
                },
                {
                    "name": "php:component",
                    "value": "libsasl"
                },
                {
                    "name": "php:version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "cyrus-sasl-2.1.28"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:source-commit",
                    "value": "63a75ce9293206aea981e9f3edcd96645bafd677"
                },
                {
                    "name": "php:input-version",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsasl-2.1.28-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libsasl-2.1.28-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsasl:2.1.28",
                        "name": "libsasl",
                        "version": "2.1.28",
                        "purl": "pkg:generic/cyrus-sasl@2.1.28"
                    }
                ],
                "notes": "Built from winlibs/cyrus-sasl ref libsasl-2.1.28 at commit 63a75ce9293206aea981e9f3edcd96645bafd677 with upstream identity cyrusimap/cyrus-sasl tag cyrus-sasl-2.1.28."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/sqlite3@3.53.4",
            "name": "sqlite3",
            "version": "3.53.4",
            "purl": "pkg:generic/sqlite@3.53.4",
            "licenses": [
                {
                    "license": {
                        "id": "blessing"
                    }
                }
            ],
            "copyright": "NONE",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/sqlite3-3.53.4-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/sqlite/sqlite"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/sqlite/sqlite/tree/version-3.53.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/sqlite3.git@90771f2f145baf5b9a2e094ff9ad36d700079125"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "sqlite3"
                },
                {
                    "name": "php:component",
                    "value": "sqlite3"
                },
                {
                    "name": "php:version",
                    "value": "3.53.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.53.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "sqlite/sqlite"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/sqlite/sqlite"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "version-3.53.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/sqlite3"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/sqlite3"
                },
                {
                    "name": "php:source-ref",
                    "value": "sqlite3-3.53.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "90771f2f145baf5b9a2e094ff9ad36d700079125"
                },
                {
                    "name": "php:input-version",
                    "value": "sqlite3-3.53.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "sqlite3-3.53.4-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/sqlite3-3.53.4-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:sqlite3:3.53.4",
                        "name": "sqlite3",
                        "version": "3.53.4",
                        "purl": "pkg:generic/sqlite@3.53.4"
                    }
                ],
                "notes": "Built from winlibs/sqlite3 ref sqlite3-3.53.4 at commit 90771f2f145baf5b9a2e094ff9ad36d700079125 with upstream identity sqlite/sqlite tag version-3.53.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "name": "libsodium",
            "version": "1.0.22",
            "purl": "pkg:generic/libsodium@1.0.22",
            "licenses": [
                {
                    "license": {
                        "id": "ISC"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libsodium-1.0.22-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/jedisct1/libsodium"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/jedisct1/libsodium/tree/1.0.22-RELEASE"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libsodium.git@1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libsodium"
                },
                {
                    "name": "php:component",
                    "value": "libsodium"
                },
                {
                    "name": "php:version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.0.22-RELEASE"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libsodium"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libsodium"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:source-commit",
                    "value": "1777bbc853d2aeb124e7b842a11b916193db7bdf"
                },
                {
                    "name": "php:input-version",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsodium-1.0.22-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libsodium-1.0.22-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsodium:1.0.22",
                        "name": "libsodium",
                        "version": "1.0.22",
                        "purl": "pkg:generic/libsodium@1.0.22"
                    }
                ],
                "notes": "Built from winlibs/libsodium ref libsodium-1.0.22 at commit 1777bbc853d2aeb124e7b842a11b916193db7bdf with upstream identity jedisct1/libsodium tag 1.0.22-RELEASE."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "name": "libtidy",
            "version": "5.8.0",
            "purl": "pkg:generic/libtidy@5.8.0",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libtidy-5.8.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/htacg/tidy-html5"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/htacg/tidy-html5/tree/5.8.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libtidy.git@8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libtidy"
                },
                {
                    "name": "php:component",
                    "value": "libtidy"
                },
                {
                    "name": "php:version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libtidy"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libtidy"
                },
                {
                    "name": "php:source-ref",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "8b6229fd70409656257a6446a254fd62fde8a03a"
                },
                {
                    "name": "php:input-version",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libtidy-5.8.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libtidy-5.8.0-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libtidy:5.8.0",
                        "name": "libtidy",
                        "version": "5.8.0",
                        "purl": "pkg:generic/libtidy@5.8.0"
                    }
                ],
                "notes": "Built from winlibs/libtidy ref libtidy-5.8.0 at commit 8b6229fd70409656257a6446a254fd62fde8a03a with upstream identity htacg/tidy-html5 tag 5.8.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "name": "libwebp",
            "version": "1.6.0",
            "purl": "pkg:generic/libwebp@1.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libwebp-1.6.0-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/webmproject/libwebp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/webmproject/libwebp/tree/v1.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libwebp.git@1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libwebp"
                },
                {
                    "name": "php:component",
                    "value": "libwebp"
                },
                {
                    "name": "php:version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "webmproject/libwebp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/webmproject/libwebp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libwebp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libwebp"
                },
                {
                    "name": "php:source-ref",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                },
                {
                    "name": "php:input-version",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libwebp-1.6.0-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libwebp-1.6.0-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libwebp:1.6.0",
                        "name": "libwebp",
                        "version": "1.6.0",
                        "purl": "pkg:generic/libwebp@1.6.0"
                    }
                ],
                "notes": "Built from winlibs/libwebp ref libwebp-1.6.0 at commit 1b7801dd9a59c1dc5bda38895d8f94c815732a9f with upstream identity webmproject/libwebp tag v1.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxml2@2.10.4-9",
            "name": "libxml2",
            "version": "2.10.4-9",
            "purl": "pkg:generic/libxml2@2.10.4",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxml2-2.10.4-9-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxml2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxml2/tree/v2.10.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxml2.git@b9ca51098499e5b4d47ed08778369b2f015fa8f3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxml2"
                },
                {
                    "name": "php:component",
                    "value": "libxml2"
                },
                {
                    "name": "php:version",
                    "value": "2.10.4-9"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.10.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxml2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxml2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.10.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxml2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxml2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxml2-2.10.4-9"
                },
                {
                    "name": "php:source-commit",
                    "value": "b9ca51098499e5b4d47ed08778369b2f015fa8f3"
                },
                {
                    "name": "php:input-version",
                    "value": "libxml2-2.10.4-9"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxml2-2.10.4-9-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxml2-2.10.4-9-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.10.4:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxml2:2.10.4",
                        "name": "libxml2",
                        "version": "2.10.4",
                        "purl": "pkg:generic/libxml2@2.10.4"
                    }
                ],
                "notes": "Built from winlibs/libxml2 ref libxml2-2.10.4-9 at commit b9ca51098499e5b4d47ed08778369b2f015fa8f3 with upstream identity GNOME/libxml2 tag v2.10.4.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2024-25062",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25062"
                                },
                                "description": "Fixed by the XML Reader XInclude use-after-free backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1c73a6c376c2d520eaada3b92cfd4f98162356a2"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2024-34459",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459"
                                },
                                "description": "Fixed by the xmllint --htmlout buffer overread backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/bf8478ae3fadbe0efad786f4770e4e022394b78c"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2024-56171",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/dd01595fc74d2746ad2888d6440f5343ac2f60dd"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-24928",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/37bebde79cb22b8c55b507c4abf19a953087b749"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-27113",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
                                },
                                "description": "Fixed by winlibs/libxml2 backport in tag libxml2-2.10.4-1."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32414",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/9bac466bb016cf25ced3b15989a5b850c5991d10"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32415",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
                                },
                                "description": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d963820501a091df1089d092e08f5d17e52ec537"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49794",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
                                },
                                "description": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49795",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/e5afa4ec2e052e417cd876079f7ba881105ab30d"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49796",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
                                },
                                "description": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6021",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d723785ce7a425d67989538605469e3e65279ab9"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6170",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
                                },
                                "description": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/35c00d862ffa065f5b1d882069e61a2164fc71a0"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7425",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
                                },
                                "description": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/f1e1f13b766eb580a8dcc0c4e7a447346dfd862e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-8732",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
                                },
                                "description": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.10.4-5.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/eae9291aa73907694dd3a4274d306e31217e746e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0989",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/b5d63abd7cadb4c74497b7ba4168ee4e39c2f87c"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0990",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/6921e4891853ebcd28288c5877020b7529cf0375"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0992",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/6f3e673437a625a686dc7ee23153693091cc1173",
                                    "https://github.com/winlibs/libxml2/commit/ff42012a0b85a601f20ea4e6ebb988bdbe295a62"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-1757",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d1ecfeadc65df66837b6f5d2ccec4551b769370e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-49043",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49043"
                                },
                                "description": "Fixed by backporting the upstream fix for the xmlXIncludeAddNode use-after-free in URI error reporting in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/55cc16e7c4d7ac47a3c36ad573442ed026342062",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2023-45322",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
                                },
                                "description": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1ffa4ec5e3dcf0387418975a7a2482c985f1e92b",
                                    "https://github.com/winlibs/libxml2/commit/c7dfe471044cb57ff340c6cd18cd7e6d69027865",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/d39f78069dff496ec865c73aa44d7110e429bce9",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/8707838e69f9c6e729c1d1d46bb3681d9e622be5"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-11979",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
                                },
                                "description": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/4b5f545c1f7a26d19d05737ea573751342046053",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-6653",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653"
                                },
                                "description": "Fixed by backporting the upstream entity amplification accounting changes in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/53d3ad9aa8a1fa570ae06c05647a8930448818e2",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/463bbeeca1805b5c4828f50d0fefc4eebaf620df",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1058"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86137",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86137"
                                },
                                "description": "Fixed by backporting the upstream xmlregexp NXT bounds check in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1b7c9619b5f6c4b85926db3846e686ccc370ed41",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/76fe08d97de88bfaef2f7d5cd27f11954cc5bee2"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86138",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86138"
                                },
                                "description": "Fixed by backporting and completing the upstream xmlDictAddQString overflow checks in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f256d14368cf8d1f45acce4cc7cb870a849b1baa",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86140",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86140"
                                },
                                "description": "Fixed by backporting the upstream xmlSnprintfElements bounds checks in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f8c21229600fe7bff02a526befe37620354eb841",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/d1686f91dbda141a752200419d35639fd6b38340"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86141",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86141"
                                },
                                "description": "Fixed by backporting the upstream xmlregexp allocation null check in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/961ca53ab01f9b6b005199cb0eaa6a48381a5f67",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/e89a8aae4c9b40cdafcf66b3f9e57c62db37bb55"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86142",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86142"
                                },
                                "description": "Fixed by the upstream XPointer length-overflow check, a v2.10-compatible memory-error path, and exact-boundary length handling in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/c153ac12135d59ead055b829097b4096117169e4",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86143",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86143"
                                },
                                "description": "Fixed by adapting the upstream write-callback integer-overflow checks to the legacy output-buffer implementation in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/4d34cab69f626041ce62d846476a8869372b2e58",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/90f293ba74d28b1d570920382e707586f68ebf35"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-86144",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86144"
                                },
                                "description": "Fixed by adapting the upstream XInclude parse-flag propagation change and regression coverage to v2.10 in winlibs/libxml2 tag libxml2-2.10.4-9.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/b9ca51098499e5b4d47ed08778369b2f015fa8f3",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/b63cd517afecb76582dd9488c55e54ceaf50de61"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "name": "libxpm",
            "version": "3.5.19",
            "purl": "pkg:generic/libxpm@3.5.19",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxpm-3.5.19-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "type": "vcs",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tree/libXpm-3.5.19"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxpm.git@90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxpm"
                },
                {
                    "name": "php:component",
                    "value": "libxpm"
                },
                {
                    "name": "php:version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libXpm-3.5.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxpm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxpm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                },
                {
                    "name": "php:input-version",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxpm-3.5.19-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxpm-3.5.19-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxpm:3.5.19",
                        "name": "libxpm",
                        "version": "3.5.19",
                        "purl": "pkg:generic/libxpm@3.5.19"
                    }
                ],
                "notes": "Built from winlibs/libxpm ref libxpm-3.5.19 at commit 90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099 with upstream identity https://gitlab.freedesktop.org/xorg/lib/libxpm tag libXpm-3.5.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "name": "libxslt",
            "version": "1.1.43-2",
            "purl": "pkg:generic/libxslt@1.1.43",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxslt-1.1.43-2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxslt"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxslt/tree/v1.1.43"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxslt.git@9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxslt"
                },
                {
                    "name": "php:component",
                    "value": "libxslt"
                },
                {
                    "name": "php:version",
                    "value": "1.1.43-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.1.43"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxslt"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxslt"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.1.43"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxslt"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxslt"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                },
                {
                    "name": "php:input-version",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxslt-1.1.43-2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libxslt-1.1.43-2-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxslt:1.1.43:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxslt:1.1.43",
                        "name": "libxslt",
                        "version": "1.1.43",
                        "purl": "pkg:generic/libxslt@1.1.43"
                    }
                ],
                "notes": "Built from winlibs/libxslt ref libxslt-1.1.43-2 at commit 9f399f8d223ddddeaeacd15285a2e993ec326c0f with upstream identity GNOME/libxslt tag v1.1.43.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2025-10911",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-11731",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/7b6b3c1b3abc2d4c4332496d44979b8a1933dd1b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7424",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/f32502000e6e6404125988d67cd9503ef8677e43"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzip@1.11.4",
            "name": "libzip",
            "version": "1.11.4",
            "purl": "pkg:generic/libzip@1.11.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libzip-1.11.4-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nih-at/libzip"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nih-at/libzip/tree/v1.11.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libzip.git@94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzip"
                },
                {
                    "name": "php:component",
                    "value": "libzip"
                },
                {
                    "name": "php:version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nih-at/libzip"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nih-at/libzip"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.11.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libzip"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libzip"
                },
                {
                    "name": "php:source-ref",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "94b3e6583c6ddf77d3fef95699310818a91bc23a"
                },
                {
                    "name": "php:input-version",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzip-1.11.4-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/libzip-1.11.4-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libzip:1.11.4",
                        "name": "libzip",
                        "version": "1.11.4",
                        "purl": "pkg:generic/libzip@1.11.4"
                    }
                ],
                "notes": "Built from winlibs/libzip ref libzip-1.11.4 at commit 94b3e6583c6ddf77d3fef95699310818a91bc23a with upstream identity nih-at/libzip tag v1.11.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "name": "mpir",
            "version": "3.0.0-2",
            "purl": "pkg:generic/mpir@3.0.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-3.0-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/mpir-3.0.0-2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/wbhart/mpir"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/wbhart/mpir/tree/mpir-3.0.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/mpir.git@796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "mpir"
                },
                {
                    "name": "php:component",
                    "value": "mpir"
                },
                {
                    "name": "php:version",
                    "value": "3.0.0-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "wbhart/mpir"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/wbhart/mpir"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "mpir-3.0.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/mpir"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/mpir"
                },
                {
                    "name": "php:source-ref",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "796ed2cee089c96dc254caec624fe9084c3a68c3"
                },
                {
                    "name": "php:input-version",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "mpir-3.0.0-2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/mpir-3.0.0-2-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:mpir:3.0.0",
                        "name": "mpir",
                        "version": "3.0.0",
                        "purl": "pkg:generic/mpir@3.0.0"
                    }
                ],
                "notes": "Built from winlibs/mpir ref mpir-3.0.0-2 at commit 796ed2cee089c96dc254caec624fe9084c3a68c3 with upstream identity wbhart/mpir tag mpir-3.0.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/net-snmp@5.7.3-5",
            "name": "net-snmp",
            "version": "5.7.3-5",
            "purl": "pkg:generic/net-snmp@5.7.3",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/net-snmp-5.7.3-5-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/net-snmp/net-snmp/tree/v5.7.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/net-snmp.git@106c51bea5ae2efeb6e6659a5ebc610ffe0e3e89"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "net-snmp"
                },
                {
                    "name": "php:component",
                    "value": "net-snmp"
                },
                {
                    "name": "php:version",
                    "value": "5.7.3-5"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.7.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.7.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/net-snmp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/net-snmp"
                },
                {
                    "name": "php:source-ref",
                    "value": "net-snmp-5.7.3-5"
                },
                {
                    "name": "php:source-commit",
                    "value": "106c51bea5ae2efeb6e6659a5ebc610ffe0e3e89"
                },
                {
                    "name": "php:input-version",
                    "value": "net-snmp-5.7.3-5"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "net-snmp-5.7.3-5-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/net-snmp-5.7.3-5-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:net-snmp:net-snmp:5.7.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:net-snmp:5.7.3",
                        "name": "net-snmp",
                        "version": "5.7.3",
                        "purl": "pkg:generic/net-snmp@5.7.3"
                    }
                ],
                "notes": "Built from winlibs/net-snmp ref net-snmp-5.7.3-5 at commit 106c51bea5ae2efeb6e6659a5ebc610ffe0e3e89 with upstream identity net-snmp/net-snmp tag v5.7.3. Only define SIZEOF_* macros if not already defined. Use Windows's inet_ntop() and inet_pton(). Backport CVE-2020-15861: remove unsafe persistent MIB index cache reads and writes. Backport CVE-2022-24805 through CVE-2022-24810: complete upstream agent table bounds, null checks and USM index lifetime fixes. Backport CVE-2018-18065: mark out-of-range non-GET table requests as processed before invoking the next handler. Backport CVE-2018-18066: attach varbinds only after successful parsing and free incomplete varbinds on every 5.7 parse failure path. Backport CVE-2020-15862: disable write access to the extend MIB by default while retaining read-only operation.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2018-18065",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18065"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the upstream table helper fix that prevents a crafted multi-varbind GetNext request from reaching the next handler with an unprocessed out-of-range request.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/985fe4155d0d05c2ef00137f6375b11ea4eee05f",
                                    "https://github.com/net-snmp/net-snmp/commit/7ffb8e25a0db851953155de91f0170e9bf8c457d"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2018-18066",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18066"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the upstream varbind parser cleanup and applying it to every parse failure path present in the 5.7 branch.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/540eb48ac1c055f739d00459f942ac0d677f2f23",
                                    "https://github.com/net-snmp/net-snmp/commit/f23bcd3ac6ddee5d0a48f9703007ccc738914791"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2020-15861",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15861"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting upstream removal of persistent MIB index cache reads and writes. The 5.7 MIB directory scanner and existing Winlibs compatibility patches are retained.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/2ef6429c7f820a25ddd653e8ee6ecd53f9208067",
                                    "https://github.com/net-snmp/net-snmp/commit/4fd9a450444a434a993bc72f7c3486ccce41f602",
                                    "https://github.com/net-snmp/net-snmp/issues/145"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2020-15862",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15862"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the upstream change that disables write access to the extend MIB by default while preserving its read-only command execution path.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/106c51bea5ae2efeb6e6659a5ebc610ffe0e3e89",
                                    "https://github.com/net-snmp/net-snmp/commit/77f6c60f57dba0aaea5d8ef1dd94bcd0c8e6d205"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24805",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24805"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24806",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24806"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24807",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24807"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24808",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24808"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24809",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24809"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-24810",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24810"
                                },
                                "description": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved.",
                                "references": [
                                    "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9",
                                    "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
                                    "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775"
                                ]
                            }
                        ]
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/c536634195c5359d20e3ae78efffbab3336f1d0a"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/3cdec74894985d67753772b72a07064c3ed2e336"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/2ef6429c7f820a25ddd653e8ee6ecd53f9208067"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/c29ca8d86c9259ff25b19338fbb8ceb5eedcd5e9"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/985fe4155d0d05c2ef00137f6375b11ea4eee05f"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/540eb48ac1c055f739d00459f942ac0d677f2f23"
                        }
                    },
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/net-snmp/commit/106c51bea5ae2efeb6e6659a5ebc610ffe0e3e89"
                        }
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openldap@2.7.0-2",
            "name": "openldap",
            "version": "2.7.0-2",
            "purl": "pkg:generic/openldap@2.7.0",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/openldap-2.7.0-2-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openldap/openldap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openldap/openldap/tree/OPENLDAP_REL_ENG_2_7_0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openldap.git@4b2449a2e39d92b3b789ff71350b4bf70ed0713e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openldap"
                },
                {
                    "name": "php:component",
                    "value": "openldap"
                },
                {
                    "name": "php:version",
                    "value": "2.7.0-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.7.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openldap/openldap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openldap/openldap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "OPENLDAP_REL_ENG_2_7_0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openldap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openldap"
                },
                {
                    "name": "php:source-ref",
                    "value": "openldap-2.7.0-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "4b2449a2e39d92b3b789ff71350b4bf70ed0713e"
                },
                {
                    "name": "php:input-version",
                    "value": "openldap-2.7.0-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openldap-2.7.0-2-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/openldap-2.7.0-2-vs16-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openldap:openldap:2.7.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openldap:2.7.0",
                        "name": "openldap",
                        "version": "2.7.0",
                        "purl": "pkg:generic/openldap@2.7.0"
                    }
                ],
                "notes": "Built from winlibs/openldap ref openldap-2.7.0-2 at commit 4b2449a2e39d92b3b789ff71350b4bf70ed0713e with upstream identity openldap/openldap tag OPENLDAP_REL_ENG_2_7_0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "name": "rxspencer",
            "version": "3.9.0",
            "purl": "pkg:generic/rxspencer@3.9.0",
            "licenses": [
                {
                    "license": {
                        "id": "Spencer-94"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/garyhouston/rxspencer/tree/v3.9.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/garyhouston/rxspencer.git@9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "rxspencer"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/wineditline@2.208",
            "name": "wineditline",
            "version": "2.208",
            "purl": "pkg:generic/wineditline@2.208",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/wineditline-2.208-vs16-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/ptosco/wineditline"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ptosco/wineditline/tree/wineditline-2.208"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/wineditline.git@39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "wineditline"
                },
                {
                    "name": "php:component",
                    "value": "wineditline"
                },
                {
                    "name": "php:version",
                    "value": "2.208"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.208"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "ptosco/wineditline"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/ptosco/wineditline"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "wineditline-2.208"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/wineditline"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/wineditline"
                },
                {
                    "name": "php:source-ref",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:source-commit",
                    "value": "39ae4ff02a06c97f804833844b767777d6625fb8"
                },
                {
                    "name": "php:input-version",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "wineditline-2.208-vs16-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x64/wineditline-2.208-vs16-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:wineditline:2.208",
                        "name": "wineditline",
                        "version": "2.208",
                        "purl": "pkg:generic/wineditline@2.208"
                    }
                ],
                "notes": "Built from winlibs/wineditline ref WinEditLine-2.208 at commit 39ae4ff02a06c97f804833844b767777d6625fb8 with upstream identity ptosco/wineditline tag wineditline-2.208."
            }
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:php-windows-deps/ICU@71.1-2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/apache@2.4.68",
            "dependsOn": [
                "pkg:php-windows-deps/apr-iconv@1.2.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/brotli@1.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/c-client@2007f-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/fbclient@3.0.14",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/freetype@2.14.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/glib@2.88.3",
            "dependsOn": [
                "pkg:php-windows-deps/libffi@3.8.0",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libffi@3.8.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libintl@1.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/zlib@1.3.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libargon2@20190702",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/aom@3.14.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libavif@1.4.2",
            "dependsOn": [
                "pkg:php-windows-deps/aom@3.14.1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libbzip2@1.0.8",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libcurl@8.22.0",
            "dependsOn": [
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/libssh2@1.11.1-6",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/nghttp2@1.70.0",
                "pkg:php-windows-deps/openssl@3.0.22.pl1",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libssh2@1.11.1-6",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.22.pl1",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/nghttp2@1.70.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/openssl@3.0.22.pl1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libenchant2@2.8.19",
            "dependsOn": [
                "pkg:php-windows-deps/glib@2.88.3"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libiconv@1.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libjpeg-turbo@3.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblzma@5.8.4",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libonig@6.9.10",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libpng@1.6.58",
            "dependsOn": [
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libpq@14.24",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.22.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "dependsOn": [
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/openssl@3.0.22.pl1",
                "pkg:php-windows-deps/sqlite3@3.53.4"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/sqlite3@3.53.4",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxml2@2.10.4-9",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libxml2@2.10.4-9"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzip@1.11.4",
            "dependsOn": [
                "pkg:php-windows-deps/libbzip2@1.0.8",
                "pkg:php-windows-deps/liblzma@5.8.4",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.22.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/openldap@2.7.0-2",
            "dependsOn": [
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/openssl@3.0.22.pl1",
                "pkg:php-windows-deps/rxspencer@3.9.0"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/wineditline@2.208",
            "dependsOn": []
        },
        {
            "ref": "pkg:generic/php@8.2.34",
            "dependsOn": [
                "pkg:generic/berkeley-uuencode",
                "pkg:generic/boost-context-assembly",
                "pkg:generic/crypt_blowfish@1.3",
                "pkg:generic/dynasm@1.5.0",
                "pkg:generic/freesec-libcrypt",
                "pkg:generic/libarchive-format-octal",
                "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
                "pkg:generic/libbcmath@0.2",
                "pkg:generic/libgd@2.0.35",
                "pkg:generic/libmagic@5.40",
                "pkg:generic/libmbfl@1.3.2",
                "pkg:generic/libzip-zip-dirent",
                "pkg:generic/mtrand@1.0",
                "pkg:generic/openldap-ucgendat",
                "pkg:generic/pcre2@10.40",
                "pkg:generic/snprintf",
                "pkg:generic/strlcat",
                "pkg:generic/strlcpy",
                "pkg:generic/strnatcmp",
                "pkg:generic/tcl-scanf@8.3.0",
                "pkg:generic/timelib@2022.12",
                "pkg:generic/xkcp-sha3",
                "pkg:generic/xxhash@0.8.1",
                "pkg:php-windows-deps/ICU@71.1-2",
                "pkg:php-windows-deps/apache@2.4.68",
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/c-client@2007f-1",
                "pkg:php-windows-deps/fbclient@3.0.14",
                "pkg:php-windows-deps/freetype@2.14.3",
                "pkg:php-windows-deps/glib@2.88.3",
                "pkg:php-windows-deps/libargon2@20190702",
                "pkg:php-windows-deps/libavif@1.4.2",
                "pkg:php-windows-deps/libbzip2@1.0.8",
                "pkg:php-windows-deps/libcurl@8.22.0",
                "pkg:php-windows-deps/libenchant2@2.8.19",
                "pkg:php-windows-deps/libffi@3.8.0",
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/libjpeg-turbo@3.2.0",
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/liblzma@5.8.4",
                "pkg:php-windows-deps/libonig@6.9.10",
                "pkg:php-windows-deps/libpng@1.6.58",
                "pkg:php-windows-deps/libpq@14.24",
                "pkg:php-windows-deps/libqdbm@1.8.78",
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/libsodium@1.0.22",
                "pkg:php-windows-deps/libssh2@1.11.1-6",
                "pkg:php-windows-deps/libtidy@5.8.0",
                "pkg:php-windows-deps/libwebp@1.6.0",
                "pkg:php-windows-deps/libxml2@2.10.4-9",
                "pkg:php-windows-deps/libxpm@3.5.19",
                "pkg:php-windows-deps/libxslt@1.1.43-2",
                "pkg:php-windows-deps/libzip@1.11.4",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/mpir@3.0.0-2",
                "pkg:php-windows-deps/net-snmp@5.7.3-5",
                "pkg:php-windows-deps/nghttp2@1.70.0",
                "pkg:php-windows-deps/openldap@2.7.0-2",
                "pkg:php-windows-deps/openssl@3.0.22.pl1",
                "pkg:php-windows-deps/sqlite3@3.53.4",
                "pkg:php-windows-deps/wineditline@2.208",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        }
    ],
    "vulnerabilities": [
        {
            "id": "CVE-2025-5222",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5222"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/ICU@71.1-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "icu4c-71.1-2 retains the CVE-2025-5222 genrb buffer hardening from icu4c-71.1-1."
            }
        },
        {
            "id": "OSV-2020-866",
            "source": {
                "name": "OSV",
                "url": "https://osv.dev/vulnerability/OSV-2020-866"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/ICU@71.1-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values."
            }
        },
        {
            "id": "OSV-2020-867",
            "source": {
                "name": "OSV",
                "url": "https://osv.dev/vulnerability/OSV-2020-867"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/ICU@71.1-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values."
            }
        },
        {
            "id": "OSV-2021-1236",
            "source": {
                "name": "OSV",
                "url": "https://osv.dev/vulnerability/OSV-2021-1236"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/ICU@71.1-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in icu4c-71.1-2 by backporting ICU-20715, which resets outdated collation prefix and contraction context values."
            }
        },
        {
            "id": "CVE-1999-0289",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0289"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The affected legacy Win32 path handling is not present in Apache HTTP Server 2.4 builds."
            }
        },
        {
            "id": "CVE-1999-0678",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0678"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE concerns a Debian default ServerRoot configuration; Debian packaging and configuration are not present in the Windows artifact."
            }
        },
        {
            "id": "CVE-2025-3891",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3891"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects mod_auth_openidc, which is a separate module and is not included in the Apache dependency artifact."
            }
        },
        {
            "id": "CVE-2025-15661",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix."
            }
        },
        {
            "id": "CVE-2026-55199",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c."
            }
        },
        {
            "id": "CVE-2026-55200",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c."
            }
        },
        {
            "id": "CVE-2026-58050",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58051",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-66032",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66032"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream nullification of freed SFTP response data in src/sftp.c."
            }
        },
        {
            "id": "CVE-2026-66033",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66033"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream runtime bounds checks for AES-GCM block processing in src/openssl.c."
            }
        },
        {
            "id": "CVE-2026-66034",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66034"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checking for public-key comment lengths in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-66035",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66035"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream lower-bound validation for Encrypt-then-MAC packet decryption in src/transport.c."
            }
        },
        {
            "id": "CVE-2026-7598",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-6"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting upstream username_len bounds checking in src/userauth.c."
            }
        },
        {
            "id": "CVE-2017-8806",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8806"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libpq@14.24"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects Debian and Ubuntu postgresql-common cluster scripts, which are not included in the Windows libpq artifact."
            }
        },
        {
            "id": "CVE-2022-49043",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49043"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream fix for the xmlXIncludeAddNode use-after-free in URI error reporting in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2023-45322",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-25062",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25062"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the XML Reader XInclude use-after-free backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-34459",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmllint --htmlout buffer overread backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-56171",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-24928",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-27113",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 backport in tag libxml2-2.10.4-1."
            }
        },
        {
            "id": "CVE-2025-32414",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-32415",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-49794",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
            }
        },
        {
            "id": "CVE-2025-49795",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-49796",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
            }
        },
        {
            "id": "CVE-2025-6021",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-6170",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-8732",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.10.4-5."
            }
        },
        {
            "id": "CVE-2026-0989",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-0990",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-0992",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-11979",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-1757",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-6653",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream entity amplification accounting changes in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-86137",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86137"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream xmlregexp NXT bounds check in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86138",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86138"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting and completing the upstream xmlDictAddQString overflow checks in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86139",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86139"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "protected_by_mitigating_control",
                "detail": "Not affected: libxml2 2.10.4 retains the equivalent if (!(len > 0)) guard in xmlURIEscapeStr; Yocto independently classifies its older line as fixed-version for the same reason."
            }
        },
        {
            "id": "CVE-2026-86140",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86140"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream xmlSnprintfElements bounds checks in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86141",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86141"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream xmlregexp allocation null check in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86142",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86142"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the upstream XPointer length-overflow check, a v2.10-compatible memory-error path, and exact-boundary length handling in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86143",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86143"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by adapting the upstream write-callback integer-overflow checks to the legacy output-buffer implementation in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2026-86144",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86144"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-9"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by adapting the upstream XInclude parse-flag propagation change and regression coverage to v2.10 in winlibs/libxml2 tag libxml2-2.10.4-9."
            }
        },
        {
            "id": "CVE-2025-10911",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-11731",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7424",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "protected_by_mitigating_control",
                "detail": "The patched libxml2 dependency shipped with this Winlibs build preserves the private atype flag bits, preventing the corruption in libxslt."
            }
        },
        {
            "id": "CVE-2014-2285",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2285"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "CVE-2014-2285 affects the Perl TrapReceiver handler used by snmptrapd in Net-SNMP 5.7.3.pre3 and earlier. The Winlibs package is based on the final 5.7.3 release and its workflow does not build or ship Perl modules or snmptrapd."
            }
        },
        {
            "id": "CVE-2015-8100",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8100"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "CVE-2015-8100 concerns OpenBSD package permissions for snmpd.conf. Winlibs builds Windows binaries and does not install an OpenBSD configuration file or apply OpenBSD file modes."
            }
        },
        {
            "id": "CVE-2018-18065",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18065"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the upstream table helper fix that prevents a crafted multi-varbind GetNext request from reaching the next handler with an unprocessed out-of-range request."
            }
        },
        {
            "id": "CVE-2018-18066",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18066"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the upstream varbind parser cleanup and applying it to every parse failure path present in the 5.7 branch."
            }
        },
        {
            "id": "CVE-2019-20892",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20892"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "CVE-2019-20892 was introduced by upstream development commit adc9b71 and affected distro packages that incorporated that unreleased change. Winlibs 5.7.3 predates and does not contain that commit, including its explicit securityStateRef cleanup in free_agent_snmp_session and changed USM ownership rules."
            }
        },
        {
            "id": "CVE-2020-15861",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15861"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting upstream removal of persistent MIB index cache reads and writes. The 5.7 MIB directory scanner and existing Winlibs compatibility patches are retained."
            }
        },
        {
            "id": "CVE-2020-15862",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15862"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the upstream change that disables write access to the extend MIB by default while preserving its read-only command execution path."
            }
        },
        {
            "id": "CVE-2022-24805",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24805"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-24806",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24806"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-24807",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24807"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-24808",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24808"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-24809",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24809"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-24810",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24810"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "resolved",
                "response": [
                    "update"
                ],
                "detail": "Fixed in net-snmp-5.7.3-5 by backporting the complete upstream Net-SNMP agent table bounds, null checks and USM index lifetime fix. Existing CVE-2020-15861 and Windows compatibility patches are preserved."
            }
        },
        {
            "id": "CVE-2022-44793",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44793"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "CVE-2022-44793 affects handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c. The Winlibs Windows netsnmpmibs build does not compile ip_scalars.c, so the vulnerable handler is absent from snmpd.exe and netsnmp.lib."
            }
        },
        {
            "id": "CVE-2025-68615",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68615"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/net-snmp@5.7.3-5"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "CVE-2025-68615 affects snmptrapd trap handling in apps/snmptrapd_handlers.c. The Winlibs Windows package builds and ships snmpd.exe and netsnmp.lib; it does not build or ship snmptrapd, and the vulnerable snmp_input handler is absent from the library used by PHP."
            }
        }
    ]
}