<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:1e4a9416-5280-3e5c-9b67-1fbf58178eb3" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-portlet</name>
      <version>2.0.0-M3</version>
      <description>The Apache Commons FileUpload Portlet component provides a simple yet flexible means of adding support for multipart
    file upload functionality to portlet.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-portlet/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-portlet</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-core</name>
      <version>2.0.0-M3</version>
      <description>The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart
    file upload functionality to servlets, portlets, and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b95d7c02b4d7d4f554920dd0919a43c6</hash>
        <hash alg="SHA-1">7b8b064cb664324ca30348d918985ab94a695355</hash>
        <hash alg="SHA-256">7e865d692af5d9c543501885aefaafd72c50ec6073ef92754d20415886473d7e</hash>
        <hash alg="SHA-512">afee84880dfe957c2962c25840882ef047d5911efb8c8e6c25649efb495514b12cb77249cfb36e2586fa752da52b0949ce523a0faaa661d186a5d9d18a009610</hash>
        <hash alg="SHA-384">0316ca347b265a2d0fe58d1fdb7ec4b9902c6415cb345e5a9683d2a22e4bd027c308c5b3ed6133571d37f3bb0e7fc303</hash>
        <hash alg="SHA3-384">b7b5d6a7ca8a50978734b046ef17e2414e12f446ac36f6bb217e1d37cfa47ad19576624f0b0a752721df9ddef89275e8</hash>
        <hash alg="SHA3-256">eaa2c0e8ddf47e0a6bbd01ecd4c3e020311c1591ebfd761ead8bab1bbda7eade</hash>
        <hash alg="SHA3-512">ce2827e23ad1091612f57ef8bff98cfd23afe2fbaa0cc60f6bc70c78238a4e0b09da7315d13ce9e7db537ff97563d83ba7d586531c7dfd15b6dba926917c40ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.19.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d1fd45f9d2a247c1d05ab1e98c07160</hash>
        <hash alg="SHA-1">1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e</hash>
        <hash alg="SHA-256">824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9</hash>
        <hash alg="SHA-512">98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c</hash>
        <hash alg="SHA-384">b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1</hash>
        <hash alg="SHA3-384">9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0</hash>
        <hash alg="SHA3-256">b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d</hash>
        <hash alg="SHA3-512">e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-javax</name>
      <version>2.0.0-M3</version>
      <description>The Apache Commons FileUpload Javax component provides a simple yet flexible means of adding support for multipart
    file upload functionality to Javax servlets and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cb21caf1a1fcda3849a715c7f0114805</hash>
        <hash alg="SHA-1">9bdd4dd26b3220b1595bef58c047bdc3ab1ef158</hash>
        <hash alg="SHA-256">ba37f6827bba8cf74c8f7771dcf6f341dfbd2a59a2b4d899e53515a968239d5e</hash>
        <hash alg="SHA-512">2c43d2dccab1776cc2ef7fe08349bdd73241814bf8c6be1faddd375ae6942c9d57b298395b3948559558a07b90387eff459ad6f47703aee6057b9ebc84e1d650</hash>
        <hash alg="SHA-384">73584bfc498fcc25704007004e2a3f3aec2bacc64e8f9e4f66eb1065994c82bc4f8d9ec1a5185b7241eb36082ee72b04</hash>
        <hash alg="SHA3-384">f5fc8038f3212e3734d80175f0c5a5772193d7eb4e449f6ea0e011f750e36185399b9c95909e65a5c056944d23e60e29</hash>
        <hash alg="SHA3-256">fdb6be0aef74dd74348299b3188245756c88fb0cefb6afd120e25b46e8038379</hash>
        <hash alg="SHA3-512">9a8ee3cad30cae9a45be9dc3b6ccb5296868b1f290d553fff0398936f8aaab07a86928dc88af6665307d226fc205d029fee800da73e9a8d83c756edc78feef29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-javax/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-javax</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar">
      <group>javax.servlet</group>
      <name>servlet-api</name>
      <version>2.5</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69ca51af4e9a67a1027a7f95b52c3e8f</hash>
        <hash alg="SHA-1">5959582d97d8b61f4d154ca9e495aafd16726e34</hash>
        <hash alg="SHA-256">c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc</hash>
        <hash alg="SHA-512">363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6</hash>
        <hash alg="SHA-384">1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824</hash>
        <hash alg="SHA3-384">2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20</hash>
        <hash alg="SHA3-256">319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995</hash>
        <hash alg="SHA3-512">dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952</hash>
      </hashes>
      <purl>pkg:maven/javax.servlet/servlet-api@2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar">
      <group>portlet-api</group>
      <name>portlet-api</name>
      <version>1.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">74e40817096d9d72963eaa143bdebd32</hash>
        <hash alg="SHA-1">f74ea066f0ba1e40a48ca54700bc7430aacebf8d</hash>
        <hash alg="SHA-256">250fd7bfac5f70f799cef286432dffef4dbb612959f8a244940a80bbc0defde6</hash>
        <hash alg="SHA-512">2477e2700a764e8f66bbf6fcb18da624105aaeebff26d24894b1ec350155c7d39d34507d4f894e759c26d872bb6cf21400a2e20849758926f446a858e6d10a2d</hash>
        <hash alg="SHA-384">9d36bf99ff30b83309537f822cacacec46b303eca88aa7a422113d9279b14101f05ed89517cd60c53610f67c224c40b6</hash>
        <hash alg="SHA3-384">1f8717fcfe1808e556d6ce6c3d98dde8190f28f65c63b8922a81e097bb6ca79e5ff8d80f4d9e361cb809515b211e899d</hash>
        <hash alg="SHA3-256">97b4d5d65d8f8588e0e257feda36a51b3d0c3a044690dea14968e0c61ad7fc3c</hash>
        <hash alg="SHA3-512">e1d85a184ced35b4fada180e0afedd633383ce1c3d087b844b6d90c11684e36ffc276d23acf9b27e530e4c91216b28f3d9a9556beb39c42ac0fa447d5a838f2a</hash>
      </hashes>
      <purl>pkg:maven/portlet-api/portlet-api@1.0?type=jar</purl>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M3?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M3?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    <dependency ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar"/>
  </dependencies>
</bom>
