{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bdb30793-9f03-5bc9-a750-5b6748f9a2dc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-bom",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:881cc1d1-9123-5a7c-b715-d80d4fdd14dc",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617314f3-6dca-5e0a-a470-9b3ef8118ac6",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b49ee0-bbda-5ba4-b0d6-d73b0dc1cb53",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aff1af0e-49d0-5047-ba00-e8ecb1375d18",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980acfe5-31ff-566e-a02c-bfef73f77bdf",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d31c4ea-d3ac-50cd-96fe-3883a9691775",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c021a199-83b8-5116-9bff-35a4f507e7e5",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:459bd333-e2c0-5e3a-b1a6-94acdc0c3615",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2b5d0cf-385e-5797-934f-716ea3abdb0a",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8877cb90-2d7f-5788-b467-889625613e7d",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54390132-108d-5cde-83fd-bf7d1e90e6e0",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f9068f0-742b-58f9-ad84-bcf0d1ec226e",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a570da49-7163-5cb0-8271-c4370327cd37",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:950e4f24-ce1c-569f-a24c-e297d03a86f0",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b730354-c605-5991-9f87-2024773e70e6",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d4c1e0-1655-55dc-bce1-a3c64d710df8",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab2827d4-9c0f-5e27-8949-b121cf27088d",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c762684-17b7-5905-ad07-fd4043684e29",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c679aa90-8fef-5563-b66a-03ec6c4d1537",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca32db1-0f6a-5367-a01e-2232c080c7e3",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a92c721-3d69-5e34-ade7-0e0b88a8fb58",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bc81763-be26-5a40-b10c-60d9479e7c6d",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea58812-38e2-52b0-98f8-9ff1e4b32b1c",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9af7c06b-3b42-510c-9c46-d2ddde91ae0d",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06a3e8f5-88a6-5d91-9581-910c2d893351",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0638799-15ca-5931-83a1-72cff9ed53a0",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d5c6293-46ff-5be1-9fc9-cc660dbbda6b",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61520655-e7fc-5960-b76c-9f7f95486ce3",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb2847f-82b7-5320-a5e0-17dbc0bb9780",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ee2feae-08d1-5961-8917-da5ab43384b8",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd7c5492-cf62-5cc2-aea2-ecae4153de67",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28655b41-e3e8-57b1-a8c6-78e5af015820",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89bfc088-914b-58d0-ba0f-932011ebe9c8",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a71b736-66d8-5e5a-8022-83f2e38731a6",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24a2b3c4-2ac9-5bf3-8626-5c0c9f25b37a",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fadd413b-f307-5b1e-b896-654a276d994b",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61f14a0-0d2c-5f91-8765-54a080dd33e7",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e227fbaf-b824-5d00-ac74-5855428e133f",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a281e1b-4667-5d82-a114-8a6afc732712",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09c5ea13-bc8f-5716-9355-58487752b51d",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c1cad4-24c7-58c8-8eba-52fe4dec7a93",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a31931f-7f9a-539e-88ac-0f1a9eef4a1a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81b65ef9-2cb8-5d6d-9bac-fad3da591876",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e3068ed-e511-55fd-b87a-c2ef8185707c",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0a7ccb2-d55b-5598-b4d2-16211df23616",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06eb9157-9fc5-52f0-b1ec-126cbbf36150",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e86868-976c-51a1-966d-29d9c562ac01",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fbbc870-7805-5e6b-b316-47a2988e0f94",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a159f05c-45b9-5dfd-95c7-752c40cdc219",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-bom@2.9.4-tuxcare.9"
    }
  ]
}