<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:90991095-0a7d-3e4c-8c0d-63110bfaf592" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-portlet</name>
      <version>2.0.0-M4</version>
      <description>The Apache Commons FileUpload Portlet component provides a simple yet flexible means of adding support for multipart
    file upload functionality to portlet.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-portlet/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-portlet</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-core</name>
      <version>2.0.0-M4</version>
      <description>The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart
    file upload functionality to servlets, portlets, and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7fb1d376a2cab4732c3c12acf69413d</hash>
        <hash alg="SHA-1">3284839791dc0130ad07d594a05c7c8750aa4dd6</hash>
        <hash alg="SHA-256">d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991</hash>
        <hash alg="SHA-512">c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777</hash>
        <hash alg="SHA-384">46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129</hash>
        <hash alg="SHA3-384">b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9</hash>
        <hash alg="SHA3-256">a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd</hash>
        <hash alg="SHA3-512">1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.19.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d1fd45f9d2a247c1d05ab1e98c07160</hash>
        <hash alg="SHA-1">1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e</hash>
        <hash alg="SHA-256">824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9</hash>
        <hash alg="SHA-512">98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c</hash>
        <hash alg="SHA-384">b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1</hash>
        <hash alg="SHA3-384">9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0</hash>
        <hash alg="SHA3-256">b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d</hash>
        <hash alg="SHA3-512">e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-javax</name>
      <version>2.0.0-M4</version>
      <description>The Apache Commons FileUpload Javax component provides a simple yet flexible means of adding support for multipart
    file upload functionality to Javax servlets and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59d0541318ce334e98f047ed472b4304</hash>
        <hash alg="SHA-1">1655c138db35bd1f4a296a5c1c7d80e6d7ef7588</hash>
        <hash alg="SHA-256">fbbf2300bb685c573ad2ca9ea71fe390a1269db384d1c1959b3698dbe096dbb3</hash>
        <hash alg="SHA-512">12774dddd5061eaf4482d3ac3670c77916b17fccd5862f35fa1e760c8985f2040e712d3d268af29d153028e65b6c7785774e579a7b75f1b6a13e82e312df3590</hash>
        <hash alg="SHA-384">b3435fb5791b83206e67db9d94fa34dca7c10e0b6b675ba2266c642fcd3db07f3b0fc837486a71524e36cddbeb45818f</hash>
        <hash alg="SHA3-384">b90fbef7a5bffd1bcc340bbef602831fac398801138892166bfd02d89d9f65434890e7b4f5363516dcb2083cfbe48c02</hash>
        <hash alg="SHA3-256">dfdb20326fd6ac2ab24a895a9009b73d8e63a74b28ee7baecaa442bf1e70cef8</hash>
        <hash alg="SHA3-512">32f8a803345f94c6d40d8791d0c2ada75486d4a374998cbc977db31c48db9e604f08440a2ad965039d499b464cc36bf10659ae137cf25086c0b803a601845cb1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-javax/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-javax</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar">
      <group>javax.servlet</group>
      <name>servlet-api</name>
      <version>2.5</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69ca51af4e9a67a1027a7f95b52c3e8f</hash>
        <hash alg="SHA-1">5959582d97d8b61f4d154ca9e495aafd16726e34</hash>
        <hash alg="SHA-256">c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc</hash>
        <hash alg="SHA-512">363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6</hash>
        <hash alg="SHA-384">1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824</hash>
        <hash alg="SHA3-384">2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20</hash>
        <hash alg="SHA3-256">319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995</hash>
        <hash alg="SHA3-512">dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952</hash>
      </hashes>
      <purl>pkg:maven/javax.servlet/servlet-api@2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar">
      <group>portlet-api</group>
      <name>portlet-api</name>
      <version>1.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">74e40817096d9d72963eaa143bdebd32</hash>
        <hash alg="SHA-1">f74ea066f0ba1e40a48ca54700bc7430aacebf8d</hash>
        <hash alg="SHA-256">250fd7bfac5f70f799cef286432dffef4dbb612959f8a244940a80bbc0defde6</hash>
        <hash alg="SHA-512">2477e2700a764e8f66bbf6fcb18da624105aaeebff26d24894b1ec350155c7d39d34507d4f894e759c26d872bb6cf21400a2e20849758926f446a858e6d10a2d</hash>
        <hash alg="SHA-384">9d36bf99ff30b83309537f822cacacec46b303eca88aa7a422113d9279b14101f05ed89517cd60c53610f67c224c40b6</hash>
        <hash alg="SHA3-384">1f8717fcfe1808e556d6ce6c3d98dde8190f28f65c63b8922a81e097bb6ca79e5ff8d80f4d9e361cb809515b211e899d</hash>
        <hash alg="SHA3-256">97b4d5d65d8f8588e0e257feda36a51b3d0c3a044690dea14968e0c61ad7fc3c</hash>
        <hash alg="SHA3-512">e1d85a184ced35b4fada180e0afedd633383ce1c3d087b844b6d90c11684e36ffc276d23acf9b27e530e4c91216b28f3d9a9556beb39c42ac0fa447d5a838f2a</hash>
      </hashes>
      <purl>pkg:maven/portlet-api/portlet-api@1.0?type=jar</purl>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-portlet@2.0.0-M4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    <dependency ref="pkg:maven/portlet-api/portlet-api@1.0?type=jar"/>
  </dependencies>
</bom>
