{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a0e26b7c-18c5-588e-a1cb-ee1f475a8b81",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-bundles",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a8b4ef9d-f52e-5b03-b7b5-deccfc450274",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eeaf587-8289-513c-a271-f6a9ab4fc983",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0243d6b1-f473-5d33-a8f9-eef7fa0740be",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b31eee36-ef42-5c2c-9a3f-f4dd64874cf2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9581741-9143-57fa-b09b-eaa339c85bb8",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ec39df9-2f7a-50d3-b3df-1e9865ce51dd",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bb300ea-959e-5095-969f-ba74980976c1",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:451007a6-7d2a-5a66-9787-7b55208a896a",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45410029-4d86-5c66-833e-d733786ac412",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6855ba99-b0c5-5530-88a8-5b8aba1beff4",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b41e46d-03c3-5b8a-a892-71d3c0ca8992",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20ef186c-9092-5968-91ef-7ff1fe2ae687",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9598151-5c4d-5c75-b53a-bf09c167bb4d",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14932f84-a55b-56a2-88ce-5acd1154adc0",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b1588a8-cbc8-529b-b297-ab3eab443a32",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74604fe5-9fe1-5206-bcce-44c154384edf",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f17aa63-db2a-5680-913e-60dc1168b7e6",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9d2cc14-ca82-5242-8a8d-9ee40fb1c27c",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c1a8abe-6f84-52e2-828b-b531ccfb14fb",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6737b14-1704-52e5-bbb4-eebf437a0056",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1e81f3b-3fc8-5c4d-bbc9-2a4912fce440",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:897c0ff0-6dcc-5d4a-85fe-aeac069d9e85",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5bb407-b8fc-5d08-b134-0e519255afd6",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c096b9e0-4413-5e82-ac2c-7b74bbb1ed92",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f18660f1-d909-5e3c-8cf4-ae775b2f938f",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe6c82da-7420-56ac-9fb2-c8243c7bc814",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bb7a2c1-918c-58d9-a2bd-339a7146ca91",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a0c2ad-883f-5fdf-92e0-81d6be04acc5",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bbc60d2-b5c4-5de3-9418-7e9c4b957a48",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac16d361-3b2c-585d-b022-e53009ff43b5",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1e0c2dc-4ebb-5bf6-befc-9fcbab39a379",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:085398cd-3204-5221-8122-924161b8fa65",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:076f2cbd-f7a7-5bfd-9885-64daeaddb0ac",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a8c3a9-29e4-5ab9-8b95-8c5f68625835",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1916cb7a-6b61-5dfd-b160-e0766d602ab4",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93070b22-c656-525c-ab04-14650f28d4a6",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89fe477-f7d2-51c2-902a-23202a97bcf5",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51553038-a287-5706-8aa8-e1f1c9ace6b3",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f802d558-7914-56b9-963b-34c06f250d97",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8af9f118-fcd7-5f05-a8d9-1aea08504571",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1eb0a351-2802-5a05-b9b3-0376a084fe82",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5f4f187-5657-56f1-a431-135f22c2a93f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:334b3b0b-9880-5586-9a89-6c45e2a1d613",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c95eae7c-0209-59b4-8cca-5a36290432d9",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ec66d5f-1529-505d-abf8-6d8dc9a339b4",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b4182c7-faa6-57a9-a317-8346ca15effb",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3434d0bb-2e2b-5139-b784-9cc56fa2e67f",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8cfbe70-c85e-5c60-bf8b-0bc7179369ee",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60867a20-7c48-5e47-895d-7d9b587aad6f",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-bundles."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-bundles@2.9.4-tuxcare.9"
    }
  ]
}