{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7ea93d7f-0e81-5e4c-a76f-63a375a72786",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c7cd00d9-53d6-5f28-8b17-e53bce649fbc",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:874dde1b-d575-5d7e-b165-b364ef685a69",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a04cd9a6-5a46-5ff3-8988-95b69575b2b6",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccbe5528-e951-50d9-9554-98fbac28ac94",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b11f65a5-c6f7-5636-b65e-05903c4387f8",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3083125-26f9-5efb-977d-1099b3da41be",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4543557-3e41-5847-97ba-2abf2c5c2ab7",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb9d677f-c2bf-5c0a-8537-c07c5a882309",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1da265d7-1048-53cf-a82d-7035f2e72121",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373cd3b0-3aae-5e03-b511-98c411097d47",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29ff1efa-aac4-579b-a95d-b64827d8458e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dc34a6f-74c3-5493-bc89-da593f991e49",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db49562e-344f-5723-a2d2-1209de34708d",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e679606-6645-594f-a969-7afd092f92b2",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b88f145-2711-5b9a-92af-5ece9c024732",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ece0506-af6b-5f5a-83ed-ee106a63a56d",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:750775ad-4df8-558f-b7e7-ab7a3d3677fc",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bec9bdf4-296b-5732-b54c-5048e41228fd",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbe2ae7a-356e-5e86-b547-b24fd3d88b33",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6092eef2-fdb5-5b62-84dd-ead62cb30c84",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50795ea7-b72b-5057-9249-159842dfd142",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:244de7d2-9d0e-5887-a712-57e77e3b1085",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30edb377-48d7-594f-bdbb-84863c33576a",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb868f1e-7586-5c0d-9be7-cf095a9b9bab",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb531637-561f-5ac2-897d-80bccf0efc35",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff3a9e8-8d76-5e04-bce6-9da26ab824aa",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beee5f4f-cbe0-5d99-b10b-05b072ecaad5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:759afe08-fc89-52b0-abb3-25d2d5d2fddb",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d49f1865-80c8-5ab5-80d3-d24130a12681",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0c2efc2-6a92-54bf-9d5e-2d1a9d640cc5",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7012c4e8-b9b2-5ca1-bbd5-848eeca5224d",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f79c487-135f-5c90-957d-3f67c4ee03cc",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a486eb96-02c9-5063-9114-e6195c97b831",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36527cc6-78a6-50d3-a0bd-0b86906c8fdb",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dce0fbaa-6db1-5769-af42-5bfa37977c41",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0313b7b2-fe4d-524f-919b-8df0f13b7445",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68bcde75-d90d-54f5-aea4-8c78ca585225",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7af5771-acce-5c94-84f9-c155c215ca25",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3784d727-109f-5dc2-9d7a-3d97a9b3a1a0",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:010a1ef9-3a27-50c4-8b23-ca32df9606d9",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1ddd60c-73ab-562e-86cf-ece4397dd216",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ddfc716-5300-5781-8287-e733caa6bccd",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1b40d6f-d1b5-58f4-bd3f-f541638cd9bf",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0024213f-71f2-5230-bb39-9bc9475383d4",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8389780d-10e8-56e8-b723-bcb2ea0cd941",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c26924-08ab-518c-bea1-881425c81a9c",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:504f032b-6885-50fc-b9bd-21f4d95907d2",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdfaf182-a758-5d7d-857d-f5fed8d28b6a",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:226febe5-f8ab-5a35-8498-abc060bd90d9",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.8"
    }
  ]
}