{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:75f062d6-7ab5-5c22-bcd0-c22fdecc6d17",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval-app",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bfa300ef-a9ec-58a8-97aa-ff1e83731c58",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d192afc7-5bcf-51f0-bacf-86257e0c1a0a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d45d8965-6880-5549-9369-e22a73bac179",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5656a54-5d52-55f5-b266-d9e8b08fc074",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9979e9b6-2647-5616-8c35-8a691bd13baa",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba21899-a1c8-5c94-95dd-94f6977b7e69",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45d83554-6220-5195-a80a-fc22bf5fb531",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a03541ab-4402-5903-b8c0-a91ab93bdbc1",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b661da21-8a8f-57e6-96ea-e744c97c3711",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:466a43a3-4c59-53d5-999f-f34657edba11",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:160100bf-f2d8-507e-b46a-2350596dfa25",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755dd459-b7f2-5027-ac6c-5ae207a061fe",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8a980e-98dc-568b-a240-9a92f08e4736",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:634f75c8-fe3d-529f-920a-36ff1c19867e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9c0627c-6e56-54fa-9981-dbf22f80bb28",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c998b57f-faef-5a0f-a923-12e522c3c548",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c0ad53-fb9f-528e-a810-e4cc8db83871",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca171e9-dac8-5060-ac01-11e82ecc14e2",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf25a498-2ada-55b8-a8b4-9ed6548490e2",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdca8435-88d2-53b5-8d18-d6a5f4bcf1ca",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c8391eb-467a-5b43-8490-6d687c8bf5c7",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde303a6-6c3f-5709-b9bd-d6cfa5f314e9",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0244f89b-0851-5baa-ac19-d5798fde5b08",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e44aa94-f0b0-59f5-a7db-474a86c1011f",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:228aebdf-13af-5266-878c-951e7c47f451",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01ccf3fe-955d-5a77-a0ef-d2dfdf3cad3b",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71279411-804e-5d28-a8f0-990ddaf5c3a5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:030f1752-af7a-5264-80aa-79e26ed5fada",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5029469e-03e8-56da-9fd5-23c57b929dbc",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9043ce63-3cef-56b8-8069-7d5756daee16",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:112c333c-9748-5717-a3ac-4089c1ed36a8",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5019d88-d2fe-523e-9cb2-d56f9396ad19",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efa68c3d-f25c-53bd-9580-538dd831eda1",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfa838ff-fb51-550b-8e92-9c8ff84b9e12",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db7fa3bc-f8ed-5c9d-b24b-8d036d39a128",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71b64000-b2a0-54dd-9e29-00084db99acf",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b09de83-f7a0-5935-8647-8fcfddc31b88",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32a96c25-7efb-591b-a772-d831428b5a61",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c69b209-817b-56a9-aebd-527e0f1bb9dc",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:677900ab-7e97-5754-8303-651f6f94eaa3",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:065806f2-ad3d-5152-be6a-c75f53c2babd",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d74c055-44e3-59d9-8e6a-7032e99bd3df",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:544a015f-fd7f-5105-9b70-93e0ff8c51be",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4f8961b-cfe8-50f9-9fab-9ce5306ed525",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b76849a-2e61-5bb9-be4e-131a9770edbd",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbb08c3b-e793-5fda-ae16-6743da393728",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be799e5b-26d8-5dd2-b44b-4b75f26b52ac",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1e2710a-19fc-5b86-9394-669245f35c8e",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3162d8e9-cb1d-54e2-ab59-ae86852c6f59",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.8"
    }
  ]
}