{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9097453f-d3bb-5d4b-8656-a5fc39c5df4b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitter-fs",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:165b55f1-3012-5e2d-9b67-0528af46fd4b",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4b5f7d5-f20e-51d2-b76b-bec08fee6ff4",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d519b59-d69c-56e9-9d77-a61291cca2ec",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fd97227-1163-58de-8b57-7896798a83d0",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3a2b772-26e7-5d5a-8815-0649dea84c70",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e242b3d5-4469-5b1e-b530-b23ecb24a8ff",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3403a532-c8be-545b-9040-b42004a57abb",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a601defd-e7ae-5fa9-82d3-c5a9897bb98f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eba2670-ea1b-56e7-98b2-e2456deb8044",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58b4ea4c-655b-52e7-b36b-f61bc782614a",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34e0a63d-ea14-581b-a92d-820c9c99a358",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:567f9e28-3bb6-5443-973a-13db7846ce75",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:250e3320-8564-5ef8-826e-c1870801eb3b",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e5c2a4d-7fb6-5240-9c98-d8a5c365f48c",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:152e1db8-116c-5c3f-b41a-47d67b0ce821",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8754f927-3d30-5c85-94fd-6e8bbc8b98ae",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc6a5680-a686-53ea-ac91-66ff23b96e60",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2c73b68-b2a5-5590-8770-dc6d6ad206ad",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb53f505-c6ae-5e21-b5e1-6dc48d247f15",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817d9e19-161f-5ec9-892c-8a80f3d2f3ab",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9365c2d4-0c9b-52e3-bee3-f53525e04675",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66aad62d-79fb-5788-a952-733948e99647",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da0e4c73-2f7f-5bd6-abd0-ef7622fab18a",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91f7e3e4-04f5-518b-a2c0-3090596869a0",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e4c4bec-dc02-5c55-8359-9e13362ef89c",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df4e47b3-a412-5d55-adf1-19694bc4f7af",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf2b2d6c-485e-56d0-8846-51285df68205",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f893dbdd-d827-5608-909b-ebc0421121fa",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d91d3caf-be07-5fd5-8ca6-9e121197bdd6",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2967ddcb-4f74-5b52-95fe-a94822a1c7bc",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ca57ec2-a264-5ce2-ae2e-9c401530ba1b",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ca81773-50df-5708-bf3a-52e51eb9384e",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71a462a1-650b-5801-82bc-864d474427d5",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57aa2cf3-4c85-5c60-aeac-9a3d3ed0a409",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65021085-6be8-5882-99cf-c21518a3db68",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5ab66e1-04fa-5d77-ba5f-24bf37510349",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dcbec6f-6287-5097-8de9-6842f24f44f1",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0766903-0d6e-59d7-bd42-e62144af134b",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0dca16c-eea7-5283-81fb-35b325874681",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92088519-940c-51e6-83f5-a453d483d989",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f71047e7-4ad9-58e2-8d37-fd7bb73ec6ea",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fdaa03f-1e73-59b7-b82e-0ccd8226a4f2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e902cd22-382b-5757-8ea6-0bb3ab84a331",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0826f8df-6b96-5e4f-a458-810e61f72c5c",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d68e92f-c7cf-56c4-b964-4ebdb1eedf91",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:832e1744-2492-5419-bfac-ef8f371a0f37",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac94b90a-f32b-5077-b9c8-fbb9c108cdb5",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3ff39fc-7212-527a-81d3-0d78859c92ff",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6340bf5c-5352-5bb7-89d4-0c22b9f8b84d",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-fs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitter-fs@2.9.4-tuxcare.8"
    }
  ]
}