{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e89f80cb-1a55-559d-be2a-a13fa9b58e4a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitters",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7a71ab80-76d7-578b-884d-848cbb70598f",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fd5c48f-f44f-50d9-9fcb-2a69dc0df93f",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6800c55-e958-5c4e-8fb8-877c7c0dd3a3",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:205a8d21-a18f-5725-a662-75f2ea3d4bac",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ef11786-183e-576a-8357-907dc23f6b53",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f56aefc-1def-5e2a-881a-d5e09412de40",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53484ae7-0676-5af9-b555-989eea142c7a",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b761f78b-2a21-51e0-ae52-181d547bd4a1",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c73e74c1-4e43-5f34-b14d-d13ca6980db7",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ad68df9-f3b7-5494-89f3-683ed8e0542e",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b90df3aa-7428-5b63-8d8e-6422878db46d",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed7e4bf-5d6c-590d-a042-93da824edcfc",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f53fb2fd-06aa-5ada-b94f-b071897cce8e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d90eab5e-55ec-56d5-b89e-ac9efba1b5e1",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:429175f7-19cb-5247-b0e7-fea6edac57dd",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a15f0b0-8054-56e9-bc50-662bb3d46921",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a32fde70-3be5-5caf-ab6d-fc8f8c3f4efe",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e39109ef-472c-528a-bf32-e10e25973ea3",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12f1b925-bd04-5346-9bad-6ed31c5207cd",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ae17b0-db00-5905-b76d-3116a16bc90e",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5f1232c-cfb5-5d66-9dd0-ee63ced9de1f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b494ef9-ee59-5cf8-93b6-da4db23462ba",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd743d72-6c3c-5d93-9cad-94fc479b0677",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6f48a8c-93c2-518b-93cf-38876839b22e",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d84893-3306-5e86-b256-4da2f66410b1",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb806f01-67d0-5d63-9190-cf2de8428029",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55b1112a-a87f-573f-a493-a0d1d0881e79",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038c3470-a34c-5713-a055-5917a2112d20",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06dc24bd-d9f5-5fc0-814a-2912e999d0b6",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01e5591d-5e93-5e17-a651-d8fe13a01150",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff8a801c-da70-5131-9b39-ea840d847586",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72998025-5947-5ba0-a539-d7b37cfb6b92",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1b4bbb5-a987-5c26-a172-3511310b13f0",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28edebb5-b1a3-58d2-b125-487f088e24cd",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60b4f7b9-2952-5e02-9c07-8b8c853541df",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75e8908c-4811-58c8-be43-80b183fb07e9",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:378bbc9a-39ab-5bfe-bde0-b37469664c2c",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10710cc4-c97b-5998-ad25-0773c9a36c60",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a8a5582-395d-5f9d-b055-3092e58fc274",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17e9dee2-d3a8-5aea-b084-8be2e55eb306",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e136bfd-88f7-597a-a6e2-256c6dc1ff09",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b06dd0a-abd7-5878-999e-e4d10edae69f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b74da2-1842-5712-a0e1-82a6cbbedb76",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3249984b-9568-50c8-ab67-51cd3f598ff1",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:809b1697-591d-585f-9397-057853c20d80",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:418a47a1-e535-5fbb-8890-7e43990116b3",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cb28f03-64f5-5a96-abf4-055f536990a2",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0fe8539-2400-5c8b-aa17-0782d90e8770",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb134720-65d3-5498-8f71-bf5f5478a90f",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.8"
    }
  ]
}