{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6186cdff-b738-5975-a55d-0b8fe3456f8f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval-app",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e550a64f-deae-5b78-b51d-f18429fca739",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1472e385-5209-5bd0-965a-cdaedbc2ce4d",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:981b05ab-0a30-5e2b-9905-01d907e057ab",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48199291-98e1-5e86-ab8e-bc107576ec88",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bb600c9-aff3-53ff-974d-95e3bdd74f07",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219cc54a-4cb7-58cf-aa2f-21514f5fe50f",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce759031-4c88-5674-964e-6e728990a6bc",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1265028d-e2d1-5cbb-b00a-c6365dae8240",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:110330de-82c4-5eb9-90f6-391da6aa025c",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c8d79a3-0c53-5af1-96c1-ae2a0ece2180",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:967310c0-f3bb-5857-9547-ffe4564ace6b",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a53deaa6-aad0-582b-b11e-fcf2dc37dcda",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b03b434b-803c-5693-bb2c-6b92b05cf31a",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea33a56f-8b49-5450-b0aa-0f4e3f49f2cc",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:738fb6a4-283b-5409-850a-3f81fd483d7c",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f80c669-405c-59fe-95f6-d4d8b6e80495",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cac49c77-ab5f-5d59-a387-245236ca8bef",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:095ea8e1-ea08-502a-ba17-d46b84be164d",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88acbb99-656b-5c65-89c1-f73cb252ab6f",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f0af6fd-1d33-563e-ae05-3983ccdf860a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa3ee300-7067-5a69-99ff-36435283b16e",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d144c520-2b68-5a46-b409-0bb766d71fc6",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ececc9-8a3f-5555-9762-612e2822abe8",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a260b1a-8915-5391-930e-5a63f16bb5cf",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f4eabf3-372d-5d16-adf7-66e13a4481ac",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e437b985-aa88-5045-9078-318bb68df1ba",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219697ca-251c-534f-92bc-546dcb6dabba",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:affea8e4-05db-5eee-b7ab-8358f3e2a763",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f8851d-2d26-520e-8fb5-cf5ac73b88bb",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06a4d5c6-062f-5e26-8c28-c3f75ed2c095",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c80a6c0c-771c-5520-b770-8cc73730c5b4",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a694449-ded5-5fce-ab4a-244fc40945bd",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6614310e-01f2-5af6-9087-97cf24664fe7",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0e7b81d-bb3c-5fe5-abc8-63e70094c431",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04043131-38c0-57e5-aef9-cbdb3f6c0b68",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c240b85-995d-55cc-a68b-e20008a4f63f",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24fae7c9-75ba-5a32-9b7f-a2b906d0138e",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a5440c5-85b9-5c83-8e52-e7f28c9b2da4",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af034a7d-cfef-5548-86d5-abb26904d53d",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8e7dd7-3e61-5bde-845d-a13b41163010",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73121a1f-e1d6-5fbc-85db-a691c5c1f5f7",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74c5cf10-46e3-561f-ab49-29bc9189964f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfd89aec-29ad-5917-8693-548196129f1b",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb74022-8729-5b50-bbce-c4addb30ae1d",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f5abc7-8bcc-5b6b-a607-baa390925520",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3eaee0b7-208e-5dc7-a804-937a148d36d7",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85fcfbd8-d9b9-5199-8aac-049cc20be320",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb0a4b9c-74cc-553d-818b-b1513d6ca6e0",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aa90c97-3b63-58d7-9175-12f51f59a599",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-app."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval-app@2.9.4-tuxcare.9"
    }
  ]
}