Issues

• XML deserialization fails for pedigree/commits on a metadata/tools/components component

  CycloneDX/cyclonedx-core-java#942 · Filter by author Lajcik opened on Sep 17, 2026
  1

• XmlParser - unable to parse XML SBOM with evidence entries

  CycloneDX/cyclonedx-core-java#938 · Filter by author rsvoboda opened on Sep 14, 2026
  1

• Drop dependency on packageurl-java

  breaking change
  CycloneDX/cyclonedx-core-java#917 · Filter by author nscuro opened on Aug 14, 2026 · 14.0.0
  1

• Cross-build: make line endings configurable?

  CycloneDX/cyclonedx-core-java#902 · Filter by author myron0815 opened on Jul 29, 2026

• SHA3-256 is not supported by Java 8

  CycloneDX/cyclonedx-core-java#848 · Filter by author bodewig opened on Jun 12, 2026

• Partial serialization

  CycloneDX/cyclonedx-core-java#838 · Filter by author x1gma opened on May 29, 2026

• TaskType enum fails to deserialize lowercase "lint" value defined by CycloneDX 1.6 schema

  CycloneDX/cyclonedx-core-java#819 · Filter by author Theerthamanoj opened on Apr 29, 2026
  1

• Declaration affirmation SignatorySerializer.java not serializing for XML

  CycloneDX/cyclonedx-core-java#812 · Filter by author andrew-m-leonard opened on Apr 2, 2026
  1

• Additional license names

  CycloneDX/cyclonedx-core-java#792 · Filter by author bilak opened on Feb 20, 2026

• Empty metadata --> tool tag causes parsing exception

  CycloneDX/cyclonedx-core-java#784 · Filter by author YanWittmann opened on Feb 3, 2026
  1

• Also read license-mapping-override.json to allow overriding license mapping

  CycloneDX/cyclonedx-core-java#682 · Filter by author jakub-bochenski opened on Jul 31, 2025

• Parsing ISO 8601 compliant metadata.timestamp returns null in bom

  CycloneDX/cyclonedx-core-java#681 · Filter by author EilMar opened on Jul 31, 2025
  1

• Publish nightly builds

  CycloneDX/cyclonedx-core-java#679 · Filter by author jakub-bochenski opened on Jul 29, 2025

• Bouncy Castle License

  CycloneDX/cyclonedx-core-java#643 · Filter by author bilak opened on May 21, 2025

• Oracle Free Use Terms and Conditions License

  CycloneDX/cyclonedx-core-java#642 · Filter by author bilak opened on May 21, 2025

• Xml SBOM parsing not thread safe

  CycloneDX/cyclonedx-core-java#626 · Filter by author Lajcik opened on Apr 9, 2025
  1

• JSON serialized Property Value containing multiple spaces get "squashed"

  CycloneDX/cyclonedx-core-java#583 · Filter by author andrew-m-leonard opened on Dec 23, 2024

• Low EPSS scores are serialized in E-notation, causing validation to fail

  CycloneDX/cyclonedx-core-java#566 · Filter by author sschuberth opened on Dec 6, 2024
  3

• org.cyclonedx.model.Dependency is missing "provides" mapping according to CycloneDX 1.6 spec

  CycloneDX/cyclonedx-core-java#565 · Filter by author vibe13 opened on Dec 5, 2024
  1

• Component.copyright should be escaped when serializing to XML

  CycloneDX/cyclonedx-core-java#538 · Filter by author nnobelis opened on Oct 18, 2024
  1

• Unable to resolve custom license

  bug
  CycloneDX/cyclonedx-core-java#471 · Filter by author skhokhlov opened on Aug 1, 2024
  2

• ParseException with nested components in the metadata section (XML SBoM)

  bug
  CycloneDX/cyclonedx-core-java#447 · Filter by author empwilli opened on Jul 5, 2024
  1

• Implement "Roundtrip" Tests to Improve Integrity

  enhancement
  CycloneDX/cyclonedx-core-java#418 · Filter by author msymons opened on Jun 10, 2024
  2

• Missing CHANGELOG entries

  CycloneDX/cyclonedx-core-java#346 · Filter by author wleese opened on Oct 27, 2023

• validate method should read schema version from the file

  enhancement
  CycloneDX/cyclonedx-core-java#332 · Filter by author sonnb opened on Oct 6, 2023