{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T17:14:10.386Z",
    "tools": [
      {
        "vendor": "apk-scanner.com",
        "name": "apk-scanner",
        "version": "1.0"
      }
    ],
    "component": {
      "type": "application",
      "name": "com.alibaba.intl.android.apps.poseidon",
      "version": "26.34.0",
      "description": "Alibaba.com - B2B marketplace"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@4.9.0",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "4.9.0",
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@4.9.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_android@1.8.0",
      "group": "kotlinx",
      "name": "coroutines_android",
      "version": "1.8.0",
      "purl": "pkg:maven/kotlinx/coroutines_android@1.8.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_core@1.8.0",
      "group": "kotlinx",
      "name": "coroutines_core",
      "version": "1.8.0",
      "purl": "pkg:maven/kotlinx/coroutines_core@1.8.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_play_services@1.8.0",
      "group": "kotlinx",
      "name": "coroutines_play_services",
      "version": "1.8.0",
      "purl": "pkg:maven/kotlinx/coroutines_play_services@1.8.0"
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-0341",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-0341"
      },
      "ratings": [
        {
          "severity": "medium"
        }
      ],
      "description": "Improper hostname verification in certain configurations could allow certificate spoofing / pinning bypass.",
      "recommendation": "Upgrade to 4.9.2 or later.",
      "affects": [
        {
          "ref": "pkg:maven/com.squareup.okhttp3/okhttp@4.9.0"
        }
      ]
    }
  ]
}