{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b9b2f898-ced5-519e-9b20-34ac8fb6389a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitter-gcs",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:292b7dcf-b1f4-5faa-84da-d330808b6b4f",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f996762-22b6-5fea-bc7b-dccd6b51ec01",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb3c583-9616-5db6-a519-4886d2aa2436",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6cc528-4a96-5618-b190-56887bbc7520",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47883bf3-31a2-50c0-9e03-11f4b1d57bf8",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a785501-e275-5715-800c-ea01908ad057",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:474dcd1f-aee6-539c-9430-7f38ec1c9f64",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8dd7ac0-57fe-53c6-83e8-dae496a4c49f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ab07a80-c222-5961-97ca-29fea1e68fae",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a835628a-0016-5940-ba0a-2cc590fa6b54",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11750272-32fe-5d47-9e84-fe15ded31e8b",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8236d1d-bc0b-5f36-9061-ee337eb77b38",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:760479a6-8afd-5c30-a5cf-e8ba974f65c9",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d13b386-dc30-5ea9-9e60-b3ee435447e2",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccefb08b-e094-5e9d-a65a-2a914e384afc",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a8241d-d1a0-54c1-9882-3fd8c610f8c6",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e1cb29a-37ce-5bbc-af57-eff787fb2aa2",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07963d60-71d2-5c43-9324-4c000776801f",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a75f6337-f98e-563b-81fb-c9fec759a73a",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46a579d1-eaa9-52a1-86a1-e953c7775a24",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b315d699-0ef5-5881-a50b-932b37756ff5",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e94e9978-4f98-557b-be28-5fed7a3f431b",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67d16694-e0a6-5382-ab4f-85586bb19f3f",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bca83187-21fc-5956-8737-ca7bf223ef8f",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d20cc50a-fb6b-5f8b-b3dd-ffa9086e3a90",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae6fe93f-216d-528f-a74b-b403ea5881fa",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3357503-fbd0-5870-8dd2-7a7126302e50",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71c206c5-3d80-551d-ba9b-530ac337c068",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06745e28-49ec-5da1-a54f-2104e8077df1",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2eacbe2-e548-55de-a6b5-f424fd9d7e81",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78b45db1-df79-53b6-a95d-4f8c33f006b5",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b29a257b-67ac-5eaa-b4b7-6b3d5f1a492a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:effcf538-c9f1-503a-835b-eb3578785057",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b068bd-0391-5fb2-aa1e-306dee843833",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3abfae8-20e2-5a91-b4fd-0d62e6b590d4",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d83e2936-93a7-5ee2-a759-fa3636e73226",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89a7b1c6-4be5-5df3-9f43-b7b84ecc29f3",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2017752-759b-5275-b0bd-711c3dd28de9",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:391059f3-60e6-544a-ad93-05cbbf8be25c",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebb8f8c3-e6e3-50cc-a748-f54fcee80958",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44b3e701-16e3-5c71-97d1-6828eb92f3f1",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73443fa2-154b-54ba-9afd-56178cfac802",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31782dce-07c7-52bb-a0e3-75c1ca1a4926",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:525f6934-4164-55ad-9344-bc5d661d7e0b",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a29441-2a9c-5814-bfb8-35a751658349",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:befa269a-01eb-54d1-b136-311ee37f8f0c",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8d25cc0-34a8-5874-bee6-6cf37f17b26e",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d431f5e6-021c-5d3f-836a-e7bd81b9930d",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bc6e4ab-e5f6-53de-bc96-9d174dce5648",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-gcs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitter-gcs@2.9.4-tuxcare.8"
    }
  ]
}