{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4c1cba5f-9fa2-5a2d-8b52-48ecac630041",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitter-s3",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b43825bf-fc16-5cba-a753-91f9dbc1d4cc",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:565934cc-e437-50c2-976e-122449dbd96a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cf18a06-cb2a-5417-afae-60954306711e",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:146b6a64-2ff8-5088-be36-2ae29bc0769e",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8831ce8a-66d2-5da7-b7e0-d24acd415088",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cf49b31-4867-5eeb-bcb0-eca82f3bb1c1",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fe883a5-3acb-5c22-885a-442cb2ce8241",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dfcd276-4bbd-5b8b-aa0c-679b5fa07978",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31028b97-062b-575f-8555-2ddfc2efcfa1",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc821655-d51c-54e2-9b4b-fe2587d7ec4f",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dae6c01-7be7-5651-89e2-7302220b979c",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6e043ee-5026-5f90-8353-bbb698bdde7a",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a781cf-f91f-5444-8c22-020c323fba87",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e55bbf01-83c0-50bb-b65e-91e15c33cb5f",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49c1ee78-d3ff-5d83-9f8a-f71c227ecc90",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e337075-a22d-5ecd-940b-bf167167ca73",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e44d59c-210e-5882-901a-aa50892c1cf0",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:752b44a6-c2b5-528a-adb8-7832b8e61195",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1971f8e7-7dd5-5d53-96f2-19703e82b7b9",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91007d97-ad1a-5fe3-bbc8-56862b7b5008",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa93424e-8926-59da-8ff6-b823e4e3ca57",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7321accb-ee10-54d1-a7f1-6a074bdfc18d",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b64cb15-b37e-5064-9442-9a72e1a4f04a",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bac28f61-5d8b-5546-b032-2d7f5ae76a47",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37571d9c-d853-5d57-8fdd-22b8c6e4d53c",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4782fe21-9d06-5cd3-9166-36ae8804b5fb",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58ada620-fc00-519b-b46d-03fb98533dc7",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1e2393c-4530-5665-9dff-defd902ec4a0",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27afe51c-331e-5009-b47c-eb189ec8649a",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:303814c9-4220-5453-89ad-f3e35e33ddf8",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61e6672-aee9-50bf-a013-879e342c958f",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e3587f4-9978-5b31-b03d-960432c2048a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9d0b800-d626-5455-b202-293fd4fe2ba5",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcebf9eb-8fc1-5298-8007-271a4d541b0a",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:158624c0-2d62-5748-897e-abd1dd8d5a82",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cdeeefa-2522-579f-a3ea-9bf2952ff3ec",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec67da1b-d9de-5646-8714-8e37895b5302",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cec6418b-46bd-50c9-a733-9d9454eec459",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6463c7c-7c29-5152-b599-d9ba5732bc59",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d0f839d-36c8-54da-bed5-f757fc4d6246",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38e65fb8-8246-52f3-8b80-d852767b886e",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11d8b3aa-d6b1-5641-9e0e-a1859587276b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b312a6-8412-58a4-b94c-c98ecc6c99ac",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab6af0e-045c-5c74-a811-578b51571cd1",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2648e115-d187-5719-92c2-712a22f48d3b",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c218ca0-cae1-53d9-96a7-db2910b0150d",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e1d8e4b-a473-5b8a-8fa6-a739e422cbd0",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7032a816-2fc1-52e1-a65f-7cf56c737ac5",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be859308-610f-54cd-881c-060712261c9a",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitter-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitter-s3@2.9.4-tuxcare.9"
    }
  ]
}