{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f92a2d4b-a06c-57a0-b4cd-0d2926bdabcd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-async-cli",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:09aa4e76-7f3c-51eb-9ccb-834757aede37",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e32eac-72f4-5ccb-8980-6921dc05f17d",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:393aabfd-035e-5a7a-b7ed-2dc6740a9d30",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a7b25b-9201-50af-bad0-61e8c921dc74",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fa44b02-441f-5bc7-9ad4-bbb5b17d9357",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4da4f8be-9fd3-52ab-a694-eb24017b7232",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f25af8d-94a7-5551-adaf-d90aee207127",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f63ee64-6dd8-511d-9237-c385909b77c9",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0da6a7c-63f9-5268-a956-fa9e3d6f67aa",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d9178d9-0108-5dc4-b09f-97205e154bcc",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fde1135a-3dd8-5c13-a264-859f6c803f6f",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0483ab3a-1f6f-58db-8405-c4d152066b0e",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9bdf5e9-bb5a-5fe9-9004-dfef11ef402e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a877cc7-d819-55a1-b622-14e3c5c09037",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a758730-7c20-59cb-946f-325517fdfc89",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8fa9b57-6894-5544-8eda-cadd0eab760f",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:370f45b7-46a3-543a-8ff5-f16982d83f4e",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdd685da-9929-5dc9-9416-0b070e1a9fe6",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e39fda41-a5cb-5abe-9a63-e22d5617b8e8",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dce4118-c499-5009-9d93-5d5765cdcde7",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54a7d6f5-bc29-55d6-aa96-da74f4bece50",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51b9b46f-4408-5556-b182-6d8a9dbb1c4c",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29f8fc84-8c04-5757-aba5-f346d069d70b",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a485dde-53e9-5f7d-9180-9649e12e51a2",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961e4062-9bcf-59c2-b58a-44f23f5b85e3",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fabf7cf-f1cf-55ee-887f-9ca1fb94e657",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6a8f986-d2db-50fd-a42f-ddf68cf02cb5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8087e464-9226-5254-8e72-6c39e5dd6e05",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d95869f-7bb1-5fb4-9881-6a29e68a00e0",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f367e790-c3f3-5800-8b3c-e8905e7cc6af",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa5db2af-3ea1-5dbd-8194-7d5856e079d8",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d73a1e8-2c74-5d6e-a3a5-598ae975a5cd",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7988d486-5216-588e-bb1c-4eff488cbf28",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1fd472f-cd7e-52c5-a2b9-d140628c1035",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91ef6e38-69bb-5f9b-94ca-5fad6219527f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94e9284e-44fa-5fd0-b17d-6a45645eb90e",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db903c41-779d-5c68-9059-413ad97a263b",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d7cf6b-0e48-567d-86d3-7755e3f8ecef",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8e7d4fd-0ed8-5f81-8750-b2c27ae12cba",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7767ac7c-c797-531c-8fda-d92ff730d0ba",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15767163-787f-5dd7-80f2-d5a791e88247",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9ea9e5d-fce3-5d31-aca0-654806e5353b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cf295d0-f2e3-5d8e-83c5-5cb21b3efe13",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4c9c774-aa21-5f1c-b7b2-bf63550fb9ea",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78c5b6e9-7514-59f9-8ee4-48a1f51df670",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e718d91-ec90-52fd-8401-ee84e4820d02",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be45f855-4bcd-5e0b-b065-9b4020cd5c1f",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c908f0db-3510-5eaa-bc53-0ff75cead9ee",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fc31fb0-6576-5069-b2a5-183574c38b7c",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.8"
    }
  ]
}