{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a5e775ac-00d5-579a-92fc-7468ff3d3007",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitter-s3",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2ec5bee3-ca38-5e5f-8ffa-87a01a186056",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f375c4-1e68-5d0d-8121-4f5219a700a7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72f6586f-3ac8-5988-95e0-df31e289edd5",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9686755b-b9a9-59af-910c-cf27b36f8a77",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3c77c73-2237-5a4c-a5bd-9a24df72cf53",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adfaf4d1-5f03-59a7-8e6a-edb0a515091d",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba09ebf8-e241-57e3-82b6-63ebadc9fc16",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:748f701c-c84a-51b6-b23f-628fc1d838a1",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66b32d95-af60-5ca0-913d-1d3c143fe672",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:355ae50f-7272-5998-8097-2b84629db532",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0abf87f-efc3-5ebb-a616-297f87dcb9f4",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49c43276-2d04-5289-a5c3-edc0e2808483",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b80ed743-3216-5304-ae5c-3c437b399596",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8703e45-643a-5733-9cbe-7d21830169d8",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20c0c92b-7d44-5c77-9f5b-2cb7b2019fd2",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4732c40-ca35-512e-a92b-f160032a62cd",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8ff7d81-bf55-532a-b1e4-458d077a0562",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f387c4e-5488-50b9-b5c0-44947e8dbebd",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c423a00d-1b5f-51ca-a585-8298cf30e5c5",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d2849f6-b385-5e56-a8c4-b4bde8d24fba",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ffd7fd7-5511-5d3f-a748-78d6185f5676",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9214793-0a86-50e4-9f30-2b33672bf718",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:175f2892-bde1-5968-9764-ad9b6b0d1dc8",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c8745ac-220f-54a0-b1f6-0d1bb38666ac",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2145b86c-9ea3-5ea7-8a57-1e7098023182",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a58e7f1e-8613-501f-be1a-12da95279e30",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04f4dfea-ae99-54ec-8463-a3e715331203",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67dc54e1-0a9b-56a8-858b-a83324f217b0",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68854c67-a0e1-56f1-9a64-c1769a30da80",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f91bf4cc-0fa8-5f39-b875-5f730b1c9deb",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da3ba41e-1286-5361-b3ae-f130849c0365",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28ed83d4-bb17-5032-ad95-a3f234e09743",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b024c34-15dc-5551-ad4c-d7edef73d8d8",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7489a667-f626-5fb9-96e5-d2ec46856e4d",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd47d88f-38e3-57b0-bde7-7fe2afb8e34f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab58b8ef-faa4-5721-881a-d2eaaf51dd68",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e30c1e-6087-5eec-8102-8eb53dcf17ba",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8375f44f-3ce3-56a8-bfef-af97d4c036a0",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35bf824c-426b-5c87-96b5-2b46ebdfed79",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d37101d0-57b8-582c-8cac-69e0d0191888",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f6b3ef5-8459-53c8-91cd-55aad6fc791b",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fea54cc5-9346-559b-95c6-089b12355a86",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ad804e-21d0-53ca-9fb5-6535c0c47320",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f0beae4-351c-5534-b7d5-81fcfd3448f3",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ec1fcc-c1c2-52f4-b6c1-aa9bc05f8fa9",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc03c16-f6b0-57d2-b989-2393c9a458da",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0409c3b4-4f34-5ff7-b971-9df3eee89228",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff3465b-c166-5658-be1a-62623c72d570",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df703eb1-9102-5c0b-9278-4b1c59efc54b",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.8"
    }
  ]
}