{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:eb4863e8-7801-53dc-9c64-7dc16c32fa36",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-bundle-standard",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e890a328-3cae-5ee5-8987-8c9b5ddae51e",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72628c58-ff03-596c-9ded-ecc5875e0c7c",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f278dd23-2eb8-5944-ba16-6ed790b8c0c0",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06d97854-a65f-5b51-8b5d-633976df9de2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dabf798-03b4-5030-a7c3-d7c7ecc0c9fc",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c938e4b8-a17b-5ae2-8c01-09d29e3076f8",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:336ca9e5-b294-5e86-bc87-3cfd0aae2210",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6efccc67-0d67-57fe-b2be-0ac9386697f8",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bec77920-dc2d-587f-9f70-82f9e4df4d90",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df6d6a74-9899-56e9-b3d9-111fe19ed319",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e6507a4-644c-5e52-a51b-bbd7dcea6079",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:291c82b2-4d4d-57ff-a1ba-90dbf24104a6",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a497b375-05a4-5e2c-bc13-393c27dcc3f8",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:165092f2-44e3-56ce-a355-592a5870091d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cce3c9e0-a9e3-5ca4-86ad-ae6c73d34680",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdd21e99-e575-51d4-a1a2-f531282cb460",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c863907-f80f-568e-8509-08397b5731cf",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:711e7696-257b-5a4c-9246-1a5981ba6879",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c592f70-cf1d-5b7f-82a7-bb1492714e5c",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc569f7f-7534-5632-ae93-e5cb7fd13e6a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb96a74-badc-517b-8f90-651c532b76bc",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4ecdfc6-165a-57e7-8b4d-adab78d3a615",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:595102d6-3c2b-5fd0-adf2-39a730223150",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96c96f84-c0ab-5978-a678-e4f571155c86",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d142e35-6416-52bd-a2d9-d95506f7f0ed",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed1d3bc5-335d-5eb2-8b99-939dfd070433",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d19037-5899-51c8-a23c-54c6e0b23bab",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30e00259-741b-5e9a-a38e-8bef6f16ceb0",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4a4fe59-68ce-54c0-a66d-3e84af789b56",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:417f570e-a70d-59cc-ad7e-0c7cd6f92070",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54417ab-d52e-5d5f-ab18-0f144a917f45",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47c8218d-3bfa-5a6a-b460-7c96c36c9ae2",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e100d048-8da2-51eb-b37e-16c24e556604",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecf33265-823f-539f-a8d6-079c0cdad192",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b9fca9f-b470-5102-8815-6311c78656e8",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a51215-17e1-5418-b96d-a1f4160c0f94",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29312df0-dc6e-5d63-ad8f-f776ce040f90",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:127306ae-35aa-5b0c-8bf9-ff3f78008533",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd7a935a-dcde-52a8-a2f9-689734b99a63",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afa7059a-8765-5caf-8b5c-18d570b0bf8d",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95280a61-623d-5944-a751-34d372d8e0ef",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af6d818-f04c-54cb-a223-a245b9dc5ef0",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b952ec7-3924-5588-a2ee-a84297ebc50c",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a943f4be-9fbc-584b-856e-288b9c959aae",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bdee11e-a081-514d-a18a-2f434ed1c63a",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a7a77b2-f9fa-58be-b543-48eff5100140",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2118e954-216e-59df-b48d-438985ff4183",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcb63c5c-81c1-597f-a5c9-0aed48f59378",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bdc0daa-ef23-5dbc-ae2e-9f916b585f14",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundle-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-bundle-standard@2.9.4-tuxcare.9"
    }
  ]
}