Issues

• Drop dependency on packageurl-java

  breaking change
  CycloneDX/cyclonedx-core-java#917 · Filter by author nscuro opened on Aug 14, 2026 · 14.0.0
  1

• Cross-build: make line endings configurable?

  CycloneDX/cyclonedx-core-java#902 · Filter by author myron0815 opened on Jul 29, 2026

• SHA3-256 is not supported by Java 8

  CycloneDX/cyclonedx-core-java#848 · Filter by author bodewig opened on Jun 12, 2026

• Partial serialization

  CycloneDX/cyclonedx-core-java#838 · Filter by author x1gma opened on May 29, 2026

• Additional license names

  CycloneDX/cyclonedx-core-java#792 · Filter by author bilak opened on Feb 20, 2026

• Also read license-mapping-override.json to allow overriding license mapping

  CycloneDX/cyclonedx-core-java#682 · Filter by author jakub-bochenski opened on Jul 31, 2025

• Publish nightly builds

  CycloneDX/cyclonedx-core-java#679 · Filter by author jakub-bochenski opened on Jul 29, 2025

• Bouncy Castle License

  CycloneDX/cyclonedx-core-java#643 · Filter by author bilak opened on May 21, 2025

• Oracle Free Use Terms and Conditions License

  CycloneDX/cyclonedx-core-java#642 · Filter by author bilak opened on May 21, 2025

• JSON serialized Property Value containing multiple spaces get "squashed"

  CycloneDX/cyclonedx-core-java#583 · Filter by author andrew-m-leonard opened on Dec 23, 2024

• Low EPSS scores are serialized in E-notation, causing validation to fail

  CycloneDX/cyclonedx-core-java#566 · Filter by author sschuberth opened on Dec 6, 2024
  3

• Component.copyright should be escaped when serializing to XML

  CycloneDX/cyclonedx-core-java#538 · Filter by author nnobelis opened on Oct 18, 2024
  1

• Unable to resolve custom license

  bug
  CycloneDX/cyclonedx-core-java#471 · Filter by author skhokhlov opened on Aug 1, 2024
  2

• Implement "Roundtrip" Tests to Improve Integrity

  enhancement
  CycloneDX/cyclonedx-core-java#418 · Filter by author msymons opened on Jun 10, 2024
  2

• Missing CHANGELOG entries

  CycloneDX/cyclonedx-core-java#346 · Filter by author wleese opened on Oct 27, 2023

• validate method should read schema version from the file

  enhancement
  CycloneDX/cyclonedx-core-java#332 · Filter by author sonnb opened on Oct 6, 2023

• Confusing name of LicenseChoice class

  CycloneDX/cyclonedx-core-java#307 · Filter by author sschuberth opened on Jun 23, 2023
  1

• Add support for some lightweight markup language

  enhancementhelp wanted
  CycloneDX/cyclonedx-core-java#225 · Filter by author d-baer opened on Sep 26, 2022
  1

• License Mapping for BSD-3-Clause and BSD-4-Clause

  question
  CycloneDX/cyclonedx-core-java#205 · Filter by author msymons opened on May 30, 2022
  4

• Dependencies within Dependency class should be List<String> not List<Dependency>

  CycloneDX/cyclonedx-core-java#199 · Filter by author ajbrown opened on May 11, 2022
  4

• Generating SBOM for Java apps built with Ant

  question
  CycloneDX/cyclonedx-core-java#177 · Filter by author lweitzel01 opened on Feb 23, 2022
  6

• Consider adding an interface for classes that can take external references

  CycloneDX/cyclonedx-core-java#159 · Filter by author sschuberth opened on Nov 18, 2021
  1

• CycloneDx without maven plugin

  question
  CycloneDX/cyclonedx-core-java#157 · Filter by author bhuvi11 opened on Nov 10, 2021
  6

• JSON BOM serialization "trims" whitespace from DPKG license text (XML does not)

  question
  CycloneDX/cyclonedx-core-java#135 · Filter by author gdgib opened on Aug 10, 2021
  4

• Exception when serializing extensibleTypes to JSON

  CycloneDX/cyclonedx-core-java#99 · Filter by author sschuberth opened on Apr 15, 2021
  8