{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:91fc72f4-f261-5045-bb81-df33835d5414",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval-core",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:44d0c981-3896-5d88-8c9f-ceae8f05e29b",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1280fe15-584a-57c6-9e79-a7483c3312c1",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b729792d-055a-50a9-a71f-d183c9251e2a",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4420880c-668b-53f5-a5f6-a2d2c0591794",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9857621d-0da3-5899-b325-e4b256534f4f",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f952f03c-7b86-5af3-a431-29bbb68f1f65",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389460d8-a584-5bb1-8fa6-dc954a404f92",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b6a59b4-51d1-563b-9218-62625d7a587f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2126a83-d85b-599a-bec4-e607209894f6",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cceaab0-42f5-5f8d-88d2-4443fd452722",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57953cb3-af97-5247-bda1-9e67cf801545",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf1fcb7-2924-5c15-ad4a-08c8fca077c9",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fbcb573-791a-5776-890d-1219a1ac01c1",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2729976c-f5e4-5a65-a83a-08297c4c006c",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48d1dfa2-3a4d-5a05-82ed-b0bf16415438",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1d5e582-fa07-5990-9cbe-cc7f5b6087e6",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc416e3-b4bc-5c60-8b34-cf847448e101",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a66f75a-9d0e-5e37-9a08-9757049166d0",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e28c978c-180b-5a13-afef-441c57e3bccf",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56c41bfc-4187-5524-9696-ef4f3d8eaf0d",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5527721-449a-5c86-888e-7be8a9dbd275",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4db56934-6d74-5e4e-a2bd-4cdb8da3a9b2",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:050724d6-b854-57fa-9195-47d143ad010c",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ba6dbf2-3cec-5c79-9f29-5599ef20884a",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef71ab1d-b61e-5894-a4da-530def834810",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11d6de14-4def-578d-82f0-96ffb1cb9b27",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0282261-851b-5e26-abed-721dc503d84a",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:019a24c6-c50e-5af7-b112-e32cccb757de",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d4f7216-c1b8-593f-a84e-298a2d47a0f1",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faa5ce78-d644-5a47-aa91-0f78570109d4",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3ffc6c2-d972-5ea3-9c7e-3fd6e7eba7ee",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f15ece94-3802-5931-92b9-34eb35689556",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6425da3e-fa94-5369-8f84-06175ce35c15",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7f9c7a9-3b13-59d2-9083-8f242d3e4374",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07df9720-ada8-5680-bec8-40d905a26eab",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23b01fb7-a2e6-5b09-9749-09db02fd6529",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5482c30d-f80e-58fe-b8ac-4671484dbe24",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5074266-0a63-5302-9ee7-d74f169ed545",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2fa3d91-072b-502f-ba33-295063948992",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c50d33f3-f816-520d-9296-e894e31aa1de",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0df21586-fe15-5442-b98b-25ddba28af84",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7afcdf3a-50a1-54cc-8321-f0499fcac869",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b9f06f-d2f2-56b9-b69d-e2898c0c50e9",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef6c4c2-23bf-5e5f-924f-098d0611bdac",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6945dd12-eaec-5acb-b921-e525d77381eb",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10249b2d-f2b5-58be-915e-a94902364dd2",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73de6c8c-1b1d-5d6b-85a2-b529b3eeef46",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24008947-eebc-53b1-a438-d1ea79bfac34",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e86aa693-61b0-5da4-ae5a-69cdbc7ff35c",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.8"
    }
  ]
}