{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f9fc5a20-f2d4-530a-9caa-e69ec0ca5e7b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-bundles",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fbf461cb-eeea-51df-a2cb-6eac482d0074",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:743793c2-3d21-5d19-a027-ffdc226c7d1e",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf271a33-61c0-53af-a585-010e699c451a",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c5e0ba6-3b15-577a-83f6-0ff3126fac8e",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f77b9d7-ed1e-5cbd-93d8-2ff04c095f4d",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a187eccc-f4bc-59fc-b95c-467d73554308",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7295893-e51b-5182-b67e-1345272667b4",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a312d31-cb24-5982-a768-ba75368314b5",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65d93486-4780-50aa-a0c5-80a369c50303",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6cd659-c9cf-5239-9262-741a28e4e4a1",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:386748af-adea-59df-87d0-c5745fa35014",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cea17ce-b331-511f-8e66-a4dba6f945a1",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8404bded-4826-5349-bd36-65b14ee0f652",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:102e110e-cbab-51d6-8d62-4ca0ccc1fd27",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c8248e0-4a48-5fd4-9670-42fe74e2a90d",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:017267e7-24c9-578e-924d-742f398b1226",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1545e235-656b-5ef2-abb2-8bd3b3b76bce",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb454ee1-3b22-501e-9f8f-33e027a5ddeb",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30740313-828f-5430-b04e-387eda9e2523",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2635e3bb-0f55-50ec-aa4d-02c0209555cd",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f1c713e-01fa-5c29-8d0a-da44129e068f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b60ac2b6-55c2-555a-8797-d37e884d6dab",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08356017-95b7-5046-a5fa-eb07fe1a5b74",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4064b36d-04be-5a9e-bc88-7ab1b98811ea",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e51a854b-d455-53ea-acc0-32667e1499ef",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22d67bb1-7290-5bfa-9f09-a80d6134fba5",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd20869f-f3b5-5a02-b6ca-eb6d0d5c35a4",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7082c3fd-691b-5191-ad50-9560f398e9ee",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35e18f30-ecb7-57e8-9524-01d0932b2403",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:768b6771-230b-5e73-9c6b-84b35de0950b",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b90b376-eb6f-5f8a-9615-c5d63739192b",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76447379-25a5-5845-b9af-a8616f6cc6d2",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90676add-0bd9-5436-bf4e-96f70a67b5e7",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dbf988f-86f4-5549-8ae0-8adaae0ce416",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff90b768-3b1b-5896-b810-3ec1ec30bf57",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bfb5f94-d1d2-55fe-baee-558a5a3da646",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c00c3f4a-0b4b-5bd9-a57a-75a536da190d",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1656b109-0fea-568c-8e06-a7c4ea1a366f",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7940ca35-9c6a-5112-af37-ce44b7ffdd46",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b7561f2-7890-56d6-83ea-116850b13ffc",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cb11c86-12b0-5214-ac00-c081d0d14fa7",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd9a885-9d5f-5fac-ad78-8492b4b0cf9c",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e7554f2-3d0b-5bff-a803-4a80c61ddb6c",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8b8e3b8-df9a-5495-958a-df0d21e0e2f4",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8084b45d-10f0-5125-9a3f-f73fad00674f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a52bb9-c3a0-5b26-b24f-480cae3355ee",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f686a7e-f6ef-5387-982b-14776bb1a1d1",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc23b89e-0bfa-5055-ab88-773c7d8dac04",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8cadafd-e149-525d-9270-25f4ec00625d",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.8"
    }
  ]
}