{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:57686cc5-e4ab-59f3-96f5-87fabd9486c1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval-core",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:00df1695-d52b-5782-919a-7c0734bd914a",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65fbb8a5-37d7-58e4-bb9a-63ee16034991",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7662552f-04d0-5976-8ce4-ca06d6e8213a",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db919030-0cc6-5283-9301-5d32d6ce4e0c",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9790fb0-7d52-501b-9e4a-9e7c08024bb5",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df595146-ceab-53b7-96d3-2e972b310ec3",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51230e6c-ceb5-5862-a0b8-d7b4d4145fa6",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c54432ec-4383-59db-a6a4-893cd6199501",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ef40a66-a468-541a-87cc-e50560e10d28",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153d8e5b-825e-513c-9bba-afd8c42b5751",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5248080-7cae-572b-a938-3f466aa78d38",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e10dd254-27b8-51e4-9abe-0bf3507bfcda",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d768b0c-2681-54ba-aada-eef5c47bf80e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c391bd1-ce22-517b-b181-f29b81c98338",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:450ea466-7516-5751-971d-71ea10802604",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c984c49-ddb5-56e8-9471-ebc13f34b95c",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91190f9e-5886-5d15-813d-d18ac28c3b20",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7470a386-31b5-5e14-ae41-54d41adc0ab5",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66e8c3eb-925f-5ef7-b819-c5da5ad891b4",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60fc3a4e-7db9-570c-ab82-b67a2ff0fa21",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f617ad5a-cd7a-5ebc-9cf7-987f73227deb",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf7cc6d-77ad-5682-8b19-f98645ea593b",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5b2581-9937-5292-81b7-0589d8f4cc4b",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b97c0c4b-e373-57dc-b6af-e877d2cd5f50",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:426259db-775f-522b-82b4-b68be5917246",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26427b80-79c1-539f-93d7-3a8d304bdd88",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c43b963-b0c9-5025-a2c5-4344725b4339",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80a55b8d-a541-5f7a-a1ab-c7e2c2411fec",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:155728e9-6f96-59c7-ab5b-5d0f5810fe95",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca5acf91-ca2e-5e17-a08e-81de0a06401c",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed497c11-7185-50ef-877a-14506f626b9b",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d959ffa6-f259-548d-a30d-f0fd44f38a57",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adbcdae0-2f85-54a3-8a3a-f675f00ea242",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1d3ff73-f8a9-505f-82b7-48aedc1870f5",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5999ace7-2f1f-50cc-8c0a-093adf774419",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0098d761-7f5d-5341-9341-310abb687d4c",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b075bf2-bd68-54ee-b5e4-1ca0a438df02",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbe94eca-006a-5d2d-9d57-f9186d4a774c",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87d10e6a-4371-5ebd-859e-810b65018d4f",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a328be1-88c3-5dd1-a26b-9f09908e3037",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d171f79c-fc50-54f2-b84a-f33c4ca7d611",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5129b30e-2920-5bcf-9b83-0119d10b1f53",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d8ec8e9-5dc0-581c-98ab-78677ae93a2d",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa771e31-b65d-5a70-b8a3-e69b8c435494",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c55c090-2bd6-5587-88b6-486ec1f79acf",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2091a6e7-aaf3-5edc-aae1-b24193e0fce1",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53cb15e6-0569-567d-9e68-463c1f14ca78",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e6a460e-85d6-5094-8451-a2883b55f4d3",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e76f10f-28d8-5a54-8650-fa31d86707f6",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval-core@2.9.4-tuxcare.9"
    }
  ]
}