{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8d163167-9ff7-5bce-b0db-16bb61a6c3ce",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-dl",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:db9d4a95-a733-5785-9e29-67f124694264",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb5abe3c-e2fb-57a4-ae28-1b065593e29d",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3f03fe7-df97-5b3c-be4b-0012beac33cb",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e41837b9-d59f-5856-a4a5-3433baa9e264",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:915748cf-2c63-5d6c-89cf-1cfa9d02a93b",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4a899bb-7cf7-5b54-9a8c-6cd10e691fed",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:740aac1d-ca1c-53a4-a6b3-e17d1c0756a1",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10dd18f4-67c8-5e4a-8211-ca4de6523db0",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12279e5c-fe58-5194-9757-7d862227c119",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:463bac04-7c29-5419-82f4-ae08da2c85df",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56d29835-c76f-5aaf-bf47-ac22ef890a03",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f6dfefc-1f6c-5a74-a667-718e9e59ec61",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cccd506f-f125-5d75-b90a-5106d071e44f",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:563578e8-9f7a-5cf5-be30-c25cdc524b1e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db3367ff-5cba-5a50-afdc-08bd82602b1c",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:773943e8-ab5e-565d-a659-7ee96f500f67",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6adbeff4-5563-5cd7-9fbe-dfde9f31ae9c",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88638d53-da05-5cf6-8bdd-625bc8fdc0fb",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d9044c2-2474-5d3b-8633-019640c9b314",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a47c7b3-23aa-512c-ba33-516a0eb0cd1d",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa3c9de9-0b80-500d-9198-3500d630f9c6",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebce2680-a0ba-54cf-926c-ea331a13c7a7",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea4adfd5-5568-5a29-b87a-0975c74b2171",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1484519-16a6-5ed3-8f17-59bd9e1ff078",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31e5652c-82ed-52e8-84da-b6e1eeddad85",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d8b72fa-07d2-580e-8b5f-c412b09da601",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c6bf385-7c88-5ef1-9fc5-287869e2c579",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11651e84-1b2b-5148-b082-639182f820ed",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af724727-cfce-5314-9dfe-1d65113e1ecf",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d17fa138-4bb5-5bac-96a9-a11fb8920215",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4ba8a5d-7238-547a-8e2b-87424d9a4feb",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c386127d-80f4-58e7-9c0c-38ff4a8ad6ac",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b9a4068-d3f1-5d4e-b061-7a3bef7d3def",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bfef878-6bb0-5280-8102-e1e2c6fe8109",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c73d6ac-6700-5858-8e89-53c2b210a21b",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4ebe27f-ede4-5276-8e79-9b7be7f4a6fd",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb4fdccc-f4ec-5207-8832-be328501a7e2",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8daa8e00-4202-50f2-ba73-13c6307dbf4e",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5483516d-d6e5-5ac9-b7c7-769f14359188",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0279bff9-760a-5b1f-b9ca-6fad8520b2ca",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2dd55b8-9190-5d3d-b06a-7b80768dd926",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0338f855-0918-5ed5-9e8a-31f3abd6ff66",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c894bb6e-8115-59d5-851f-9372e4fc34e6",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43078742-fad0-550c-9dbf-0cbde2a106c7",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5117ed23-c7f6-5d43-9da7-293e929dfcfc",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2bb4a58-9f5c-593b-b713-352e46a5cff1",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b73d046-8492-5e5f-81f1-aff86a8ac42b",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c50cdec-2eb4-56fa-b3e4-df259365d85b",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:323f2937-9921-5894-9962-7a584e27e7eb",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.8"
    }
  ]
}