{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5db324ed-a683-5a23-a492-4dc1be59c826",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-async-cli",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:061d7da0-a492-5133-8c66-5a9527b4295a",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:575d37a2-8d6a-5679-b044-92aa121e3e10",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d54fd449-5066-5dab-9a99-035e21ec03fa",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee69b881-6f92-51a7-aa9e-bd693b3485a0",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ae7aced-6a78-5ea0-83f2-4612bc789a31",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f00f7b6-10bd-596b-a998-a8d2161d2c30",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3782897e-969d-5ce7-b0ee-514ac4de90f7",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:359b2aaa-ed0d-5b6e-a38e-3f064f4252cb",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e70f1313-07fd-5b90-9dcb-76a65dd9849b",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c536701-e605-59e2-b36f-4774f42c63b6",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a5e465c-e58c-5f6f-a928-551fdb7aab06",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4465844a-8f32-5ede-aeab-3c399864cb24",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:645dc1d7-3b43-5d8e-9a39-1002bf2e12af",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69604d9f-5bef-548b-909d-e4afe35f8036",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce0eba79-4c62-5bfe-8c59-9964a7f67638",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:415a6cca-cd1c-535e-83ab-9edeb1b19d6f",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be71bf88-3455-5a67-b98b-7568c91417f8",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b7136b8-b687-5a2c-bdc4-f255fa0133e1",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78823965-9d7e-5cb2-b7c7-8af59e82b525",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:753aadf3-d5f6-524b-91a1-21113dd39e0c",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6957060-527b-57f0-8250-0a32187277ad",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f8c1061-2b59-5356-b15f-7558884b5668",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51b4c2d2-427d-5b53-94d5-761d9188a4c5",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e03e185b-04d3-52b1-8502-bf629fdd78cf",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aec38a44-6ea8-5109-83ba-7e9e23e5b0c2",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7c3b33-0cc1-50e1-a943-e4193c45f877",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8579ca2-edbc-577d-9811-ec2b036d4764",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:323286ca-aeb0-5ada-b5a8-528674c9418f",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24771485-a0da-5d2f-8a4e-3f4b0cc3a9ef",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef38ecf-e673-59be-a371-79409d90d172",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:100083d5-7526-5568-b8d2-e5072e7d28a9",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b3dc1b0-74e2-5f6b-a2dc-2729058d13b2",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e965af4-8eb7-5366-8bfc-db93fa31d382",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c54cf9-9dc4-5582-bbda-f7b38ef75243",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdb09ede-49f0-5c95-a856-47ed4d70def0",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7a88a24-88d4-5a06-90fb-a03674be1b19",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f906fd0a-b0cb-5cad-9706-cf1503bf4aa9",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fee85c1-8dc4-5276-8f32-4947fdb86e3f",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3be4163-1373-55bb-a7d7-7998b00fcc10",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b527059a-cd55-5691-a0cc-c1f152dde372",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3200be4f-4543-549a-8bfd-09765ae8ec6a",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb59fd1-94a1-55ca-8ed2-55bf36a4a835",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:478607ec-0b6a-5fab-ba7f-ed2fd92b4dc0",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3ffc141-65a0-5e07-b790-4d4d93ba3806",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77a9497d-0d30-585f-9b7b-3a8b835ebfee",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad77bb60-7108-5270-97a2-fef08f8cbeb2",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93bb821c-63e9-5e9a-b643-0e585d335d4b",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c283a2c3-87c4-5fd3-a872-b79ed42b9ea0",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dcc220c-4765-5f70-8a2f-197833f5baab",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-async-cli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-async-cli@2.9.4-tuxcare.9"
    }
  ]
}