{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2ee45a4d-fa44-5e9b-8cf3-d50db0dbdd5e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-emitters",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:079bdfcf-a718-5aa8-a83a-ebdcc08457a0",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f836f88-7bc0-5567-8c04-5c25ab339972",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a2464ed-8255-5ae7-91e4-161827cebb81",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08efae04-8b42-5d6e-b0ba-f2ff99d32c8b",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab92b769-eb96-5155-bc62-0e8b40d10829",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6569e0c8-1598-5076-bcf3-7731ddc0db0e",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a38db46-9b1e-54e8-a9c9-5a0e23c090ef",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bfdaf1b-ec10-5242-9be3-2ed69fe8d61c",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:133b369f-f8b4-5365-b0c5-03362d56c6eb",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c6fbf09-d831-579a-9ece-35a6a3089b22",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:797eee3c-1025-5829-9921-9e2869bd449b",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef452d0c-156d-5f04-9c8a-6f885bdbcd5d",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:870c59be-bae5-5587-8d98-04659d5ec49f",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b8edd81-620c-52a1-afca-e5052892b4f2",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a5ca4ba-b9e4-5304-ab65-c01eb3231575",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c772588-e62c-51dd-b349-df616fa0d757",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f7da8c-4880-5b0c-87da-91524a146871",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85b2dd29-da35-5b4a-aad1-aeceedbc84b3",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6bc8d4f-6d6b-5aa5-b135-f511216bfdb0",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d29f15f-00e6-5e13-839f-f6f030fec7a4",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aadb68e-f702-5a89-80bc-dda9983c6e4c",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6975a41b-459c-505d-b478-b19d6b19bd46",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07bf538b-d5ec-539e-8147-1a1efc4b12fe",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da74c7fc-3c22-5b79-8e97-780d7febf0e2",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71cb6974-91bd-5167-81af-a588d81c8a76",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e41e0fb5-0602-53ef-9c65-9e7e6685eb14",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fbbd38c-a12f-54c1-a90b-47622df1f3ea",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31ad55d2-4d11-55da-a0f4-d23de2562748",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b37d32a-3e73-5d19-a67a-3bd5ce71836c",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db3b3f60-2272-5c48-80ca-7b4c9c1401e9",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a5a432-a575-597b-9345-e44aa2c4b118",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1954343-f277-52e9-9532-e738b30d3a34",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7516f447-6c9b-51a7-b49f-95a3e5f82adc",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fdc4898-766f-5911-99f2-6dc241704e85",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a1e0e2-c7e3-585c-8cd3-262d64a0c000",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938847da-6eb5-5f6c-b3f2-5b97fb54693f",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37e0eb04-afbf-540d-a787-fd6d61966d52",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b2f0f58-3c29-506e-bf0e-8696bbb9a304",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c240821-044d-51f7-a1f5-5f89730c9260",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae2c67cd-3f00-51da-9e50-7f9cbbc6eecc",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4de1c479-2abf-5e41-b7c5-99572714df1a",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a2e8a30-03f5-5a94-9337-6f4e7d5b2087",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24206878-8254-5305-a2c4-f54a45be0f2a",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7231df12-cf9e-5dad-96ba-7d20accdf16b",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcd648a5-233d-5b3a-9c12-e0cca537635f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff5d9366-6d4b-5a8e-bd2e-b9d167cedf60",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1aa7383-1520-54d7-a05c-c29fbf6d9827",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1ff249c-1b1c-5de9-b23a-558f6795b68e",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcb49152-8ce8-5c06-89b5-230b484d0b46",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-emitters."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-emitters@2.9.4-tuxcare.9"
    }
  ]
}