Issues

• [Defect]: broken component sub-field anchors on https://cyclonedx.org/docs/1.7/json/

  defectdocumentationformat: JSONwebsite
  CycloneDX/specification#1181 · Filter by author gernot-h opened on Oct 28, 2026
  2

• [CBOM]: Improve flexibility of algorithm families and equivalents

  proposed core enhancement
  CycloneDX/specification#1180 · Filter by author loris-s-sonarsource opened on Oct 27, 2026

• [CBOM] nistQuantumSecurityLevel cannot express "not evaluated", and carries no basis

  CycloneDX/specification#1175 · Filter by author Lennonhaha opened on Oct 25, 2026
  3

• Better support for the arrangement of cryptographic algorithms in various security protocols, such as SSH and TLS 1.3.

  cap: cryptographyproposed core enhancement
  CycloneDX/specification#1162 · Filter by author myesboy opened on Oct 16, 2026
  1

• [FEATURE]: External reference type for evaluation fixtures

  proposed core enhancement
  CycloneDX/specification#1160 · Filter by author lsmith77 opened on Oct 14, 2026
  1

• [FEATURE]: Declare which classes of dependency a BOM covers

  proposed core enhancement
  CycloneDX/specification#1159 · Filter by author lsmith77 opened on Oct 14, 2026
  9

  

• [Defect]: FFDH pattern treats ephemeral E as required

  CycloneDX/specification#1147 · Filter by author Mehrn0ush opened on Oct 9, 2026

• Proposal: a runtime component type

  CycloneDX/specification#1145 · Filter by author glenmessenger opened on Oct 7, 2026
  4

• [2.0] bug: module root are NOT unusable

  CDX 2.0defect
  CycloneDX/specification#1140 · Filter by author jkowalleck opened on Oct 2, 2026 · 2.0
  

• [2.0] move domain-specific definitions out of common into their owning modules

  CDX 2.0defect
  CycloneDX/specification#1135 · Filter by author jkowalleck opened on Oct 1, 2026 · 2.0
  1

• [2.0] common shall be contained

  CycloneDX/specification#1133 · Filter by author jkowalleck opened on Oct 1, 2026

• [2.0] refactor: rename model -> modules

  CDX 2.0
  CycloneDX/specification#1128 · Filter by author jkowalleck opened on Sep 30, 2026 · 2.0
  

• SBOM clarifications on various usecases

  proposed core enhancement
  CycloneDX/specification#1124 · Filter by author Vishnu-2810 opened on Sep 22, 2026

• Proposal: CycloneDX Safety Perspective for SRAC and safety impact workflows

  cap: perspective-registry
  CycloneDX/specification#1122 · Filter by author devashridatta-dotcom opened on Sep 21, 2026
  2

• Response vs Responce

  CycloneDX/specification#1121 · Filter by author AndrzejBiernacki2010 opened on Sep 21, 2026
  4

• [2.0] remove "service" from docs

  defectdocumentation
  CycloneDX/specification#1115 · Filter by author jkowalleck opened on Sep 18, 2026 · 2.0

• [FEATURE]: Add EAX mode to Cryptography Registry

  cap: cryptography-registry
  CycloneDX/specification#1098 · Filter by author jvdsn opened on Sep 10, 2026

• [2.0] chore: annotational value examples schall be schema-compliant

  chore
  CycloneDX/specification#1094 · Filter by author jkowalleck opened on Sep 10, 2026 · 2.0
  1

  

• revisit formulations

  cap: formulation
  CycloneDX/specification#1089 · Filter by author jkowalleck opened on Sep 8, 2026
  1

  

• [2.0] docs: remove the word "BOM"

  documentation
  CycloneDX/specification#1086 · Filter by author jkowalleck opened on Sep 7, 2026 · 2.0

• [2.0] docs - streamline code, literals, in-text examples, referenced properties

  CDX 2.0documentation
  CycloneDX/specification#1085 · Filter by author jkowalleck opened on Sep 7, 2026 · 2.0
  

• [2.0] formulation - docs make nosense

  cap: formulationCDX 2.0defect
  CycloneDX/specification#1083 · Filter by author jkowalleck opened on Sep 7, 2026 · 2.0
  

• [2.0]: Define the certificate bytes covered by certificateProperties.fingerprint

  proposed core enhancement
  CycloneDX/specification#1081 · Filter by author jaooli-cyber opened on Sep 4, 2026 · 2.0
  3

• docs tool issues for JSON produces duplicate id

  defectformat: JSONwebsite
  CycloneDX/specification#1076 · Filter by author jkowalleck opened on Sep 2, 2026
  1

  

• [2.0]: Definitions registry and multi-product inventory refactor

  breaking-changesproposed core enhancementrequest for commentRFC notice sent
  Enhancement

  CycloneDX/specification#1072 · Filter by author stevespringett opened on Aug 31, 2026 · 2.0
  2