{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-14T11:27:18.182Z",
    "tools": [
      {
        "vendor": "apk-scanner.com",
        "name": "apk-scanner",
        "version": "1.0"
      }
    ],
    "component": {
      "type": "application",
      "name": "com.facebook.orca",
      "version": "580.0.0.49.91",
      "description": "Messenger"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.compose.ui/ui@1.10.6",
      "group": "androidx.compose.ui",
      "name": "ui",
      "version": "1.10.6",
      "purl": "pkg:maven/androidx.compose.ui/ui@1.10.6"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "3.14.9",
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9"
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-0341",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-0341"
      },
      "ratings": [
        {
          "severity": "medium"
        }
      ],
      "description": "Improper hostname verification in certain configurations could allow certificate spoofing / pinning bypass.",
      "recommendation": "Upgrade to 4.9.2 or later.",
      "affects": [
        {
          "ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9"
        }
      ]
    }
  ]
}