{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cf38c6ef-5c58-5e12-95f4-709241fabaad",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-dl",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d05e3b61-2397-5214-9026-d0dc88c1bab2",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:300aaf6a-4fe3-5613-bff9-2b19c66c0507",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce685f54-4c4d-5e7c-8e8a-f66ec6e506cd",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7b1e41-043a-57a3-a3b0-434e6b9ea8e7",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4db9bd82-fe57-5149-a144-2e14f1f0a68a",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04fc7e80-9b25-5809-b27d-3232d2bbea3c",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:694dad5c-92ec-5522-a9e2-5374fabe79f0",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e252ecf-697a-5797-86cc-04dbac694941",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4318ebb-bebf-5886-826d-c9e35e3e52a5",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e117afa8-df52-5546-9b2b-83e3481d76d1",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c76e146-a04a-5dba-9f37-79905e52ffce",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:712f26d9-3b16-586f-84f2-19ef16f3d87c",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ad45a90-7ec8-5c99-a5e9-3cc663ea68f3",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60321584-98f7-57f3-8c12-1f4e58509ef1",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2ffb412-3914-5f23-ba82-0e6449b82967",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08a005a4-cd34-54b6-ad75-d20b47f76ada",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c75ba289-0d30-518e-be8e-0ae1b05c0a73",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ff16de-b50f-5978-af81-94456f18d925",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21fa03d6-5561-5a0c-a495-d7349655d069",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c934fed-e1af-5ed8-ae8a-0aad744fc374",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b2e3e23-fee0-5e1f-9dec-a3438324a1e0",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6446e271-2e45-5ae0-8fb7-afce19c44fc0",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:780dc9a0-8dc5-5778-9379-f095bc2e3133",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2c53166-a7bb-5880-b595-70113cc86767",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b219ea34-be53-56b0-8b28-7826e7a00065",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:720d4e49-8f5c-548f-832f-45f4116abc40",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d06bf9a-aa4c-5b9a-bac0-85f4cf6e8b8f",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd12352e-2657-5a77-9545-4f5c8fd507a7",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:352327aa-5dd9-58df-9400-070f88878762",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dc55ef5-2282-591c-a196-d4f3ba1a0482",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a802b38-cf37-594c-99b4-6e8d3163c4ee",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70a0b591-5e2c-59bf-8315-eeadfa4ce608",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25e62b67-8853-5dc9-ac29-9fd7ced6f921",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29fa91cb-83f6-56d6-bd61-ac90540adadb",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9f093cd-c1fa-5ae3-aa8c-be38edf2ee53",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8d5d5a1-20d1-516b-9bba-5df91f66d28c",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6ac4e6-c613-5c25-a07a-e7eb8fcff57d",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc663a1e-2a53-5c1a-8e38-d4423caa7647",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc2ba4ef-fd97-586f-bf78-1fe1255be05c",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0158a4b5-2657-5807-aa7a-78444d057a6a",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bea15e6e-eefe-56fc-87fa-b45854d31175",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c15b9004-2acd-5aa2-bb14-a44501e03b14",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2307b8d9-99bd-5128-a4f5-df8f203e1fa3",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bd14e39-caa3-59bb-82d9-196ab871b968",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7301d1bc-bbaa-5aa2-98c1-9b1b59b25811",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5557d25-fd4c-56b4-a602-f495f9eedd81",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:777d2172-5b5c-5db8-9f7d-93ea5d395820",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aacc757a-de45-5b4e-96cb-fb3dc366f28b",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8afad7b1-2f28-5234-901a-8e61436cea86",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-dl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-dl@2.9.4-tuxcare.9"
    }
  ]
}