Search results

# Proposal: AI Behavioral Risk Assertions for CycloneDX 2.0

Status: Open.

#956 In CycloneDX/specification;

· devashridatta-dotcom opened on Jun 19, 2026

Proposal: Safety Integrity Classification (SIC) — A Cross-Domain Normalized Abstraction for CycloneDX 2.0

Status: Open.

#955 In CycloneDX/specification;

· devashridatta-dotcom opened on Jun 19, 2026

Proposal: Safety Relevance Metadata for CycloneDX

Status: Open.

#954 In CycloneDX/specification;

· devashridatta-dotcom opened on Jun 19, 2026

Consider extensible signature standards support

proposed core enhancement

Status: Open.

#943 In CycloneDX/specification;

· stevespringett opened on Jun 1, 2026

[FEATURE]: Consolidate component identifiers under identifiers

cap: hardwareCapability: HBOMCapability: HBOM

proposed core enhancement

request for comment

RFC notice sentA public RFC notice was distributed to the CycloneDX mailing list for considerationA public RFC notice was distributed to the CycloneDX mailing list for consideration

Status: Open.

Enhancement

#935 In CycloneDX/specification;

· stevespringett opened on May 22, 2026

·  

2.0

[FEATURE]: Add support for conditional components

cap: hardwareCapability: HBOMCapability: HBOM

proposed core enhancement

request for comment

RFC notice sentA public RFC notice was distributed to the CycloneDX mailing list for considerationA public RFC notice was distributed to the CycloneDX mailing list for consideration

Status: Open.

Enhancement

#928 In CycloneDX/specification;

· stevespringett opened on May 12, 2026

·  

2.0

[FEATURE]: add threat detection coverage field to AI/ML-BOM (modelCard.threatDetection)

cap: ai/mlCapability: AI/MLCapability: AI/ML

Status: Open.

#927 In CycloneDX/specification;

· eeee2345 opened on May 9, 2026

[Defect]: cryptographic algorithm family enum omits families defined in cryptography-defs.json

cap: cryptography-registryCapability: Cryptography RegistryCapability: Cryptography Registry

defect

Status: Open.

#918 In CycloneDX/specification;

· Mehrn0ush opened on May 2, 2026

[Defect]: Variant pattern for PBES1 must have {hashAlgorithm} instead of {kdf}

cap: cryptography-registryCapability: Cryptography RegistryCapability: Cryptography Registry

defect

Status: Open.

#906 In CycloneDX/specification;

· meghsaha-ibm opened on Apr 4, 2026

[Defect]: Variant pattern for PBES2 must have {prfFunction} instead of {kdf}

cap: cryptography-registryCapability: Cryptography RegistryCapability: Cryptography Registry

defect

Status: Open.

#905 In CycloneDX/specification;

· meghsaha-ibm opened on Apr 4, 2026

[Defect]: Variant pattern for PBKDF2 must have {prfFunction} instead of {hashAlgorithm}

cap: cryptography-registryCapability: Cryptography RegistryCapability: Cryptography Registry

defect

Status: Open.

#904 In CycloneDX/specification;

· meghsaha-ibm opened on Apr 4, 2026

[Defect]: Variant pattern AES[-(128|192|256)]-Wrap[-PKCS7] unclear

cap: cryptography-registryCapability: Cryptography RegistryCapability: Cryptography Registry

defect

Status: Open.

#901 In CycloneDX/specification;

· meghsaha-ibm opened on Mar 29, 2026