{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:db7a084e-41c6-5db0-8456-5a3f5c3ff3f5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-bom",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:27c16ca5-3978-564c-b1c0-98080798b6a3",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d46d762-27cd-5d1b-ae68-73597bd4905b",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7594dd1f-7cb7-5290-b4c6-c80ba58cbd63",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:787928eb-b84f-51d0-b739-7a284492a735",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1746723b-6746-58fb-a84a-2a06461485a6",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c3d159f-875b-5a68-88c8-c8de52b714c2",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb61bcf6-8b1b-5622-b79f-1333313ac70e",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1dd8659-4d39-52ca-af1c-05e44ef91cdd",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b675f4e2-a13a-5013-af55-785291933de6",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adbea78a-2d47-52f0-8fe3-d608a381a0b1",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bda3194-4c2d-509d-8b2d-18e7bc3e6b39",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9946d2-15ea-5c17-9a79-632951e120a4",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c7ebce3-fdfb-51f9-bb88-66ff6ee53a3e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bfd871e-1e98-5f34-816d-3925248aab8d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:735bb08d-eee2-5e24-b4e2-75edfbd862aa",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76fea8d0-c264-586f-a406-0f9dc6cab813",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22314aaf-1d29-56fe-8596-f5e6551ed6e9",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49dcefca-5701-5ca9-9792-3f383aeb9b3d",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a96993a-4e56-594c-94fa-4bbff9dee812",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac7ad7b9-87ba-5127-8437-2e3ccc49229f",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4c4464a-12ef-53bf-9f71-30c9a6a98c97",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cc6761e-0b80-5a74-93b2-ebc181d71f86",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f06c038-9fe2-5761-a63d-537c66923333",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3f8a8d1-f264-5bad-afd0-eb22d9949f24",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab67bbd-2d14-547c-8b64-dc7bc5be4596",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f4ecfed-7eb9-5705-8391-4297da43bb2f",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4b0439e-9186-5a02-8dba-44922ce3314a",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7522883b-5cc5-5ce0-ac69-33fd3ffb2da2",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08510232-1cd7-5df8-b6c4-18c22589937e",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb45345e-f4f5-54c8-8cd3-ed2cac669ad1",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f80c760d-30e6-5a12-89f4-e541ec296e34",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:545db6e3-ad69-5619-8356-4d04569cda39",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf43b550-b198-5e07-b46d-da1211a605bb",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6977bdd6-27c7-5aac-8d60-3e1ba2094e81",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a0565e-549e-5ced-add0-00aacd05e03a",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66dbefc6-077a-53c8-ae95-0c785fb3620f",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68cf0f58-9778-52a0-a9d9-ab28d01ffb0a",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6250b2f9-9573-56ba-99cc-cc9591d0eb1c",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b004922f-4ee7-5f60-a853-8009bfca25c6",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a49bec2-df8a-5817-87fb-8a0a1125c6ec",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a89dfe-d87f-5b75-aaa7-9939e93ee2af",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8849cf0a-5f23-5d79-a00f-060c2c6a9d39",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa325f4e-565f-5bcc-ac4d-d5be2176639e",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3fd1155-d708-50b7-a609-2e487f736ecf",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fd826be-20ba-5786-bb71-30e0524f4a00",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:221ab6df-889b-5752-b389-a0c05e2ef2db",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb6e84c5-ec48-5743-8981-4943b0512f4a",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e85173a-5ec4-5aae-a695-1a819cbbae1d",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1bba3bc-5e77-5730-af82-b3c744072f27",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.8"
    }
  ]
}