{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a6abb09b-7ecc-5875-98ff-73218efffbae",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-eval",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8698fc3b-6651-5659-9a75-01b44191b204",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d301f389-f203-574f-b660-115c7e99c7b7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1a6d72-a651-5e48-86ed-60bd42a30966",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed9a7ebc-915b-5e58-be25-03d49c30ebfa",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7e96b1c-a282-5c1f-8d99-bdc5784da519",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfdb4e76-88a5-5ffe-8951-7afa63582e55",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:335e1c61-3571-575b-86b8-206c97ec4512",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2bf0d4d-e05f-5f6f-9d11-5ffef73e01d1",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aa6c93b-3478-5fcd-b205-18fc76e3558a",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5fb86fe-e36d-5364-91ed-ebaa31bff661",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:216c7f34-8593-538b-9ade-136dd95a3feb",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b0b086-5f0f-5b88-8270-d930d04a3531",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e02ef79-02de-562e-9d0c-7d47fd10c9de",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:908e2f94-f67b-5fa9-8de1-f817117243cc",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c877759c-a745-563e-987b-1d339c8a678c",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a6a5ec-6ad1-5c45-a726-78c590a483d1",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16117cc6-630e-5294-9b3d-7d03007c5493",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1445febd-1141-5813-9f28-27b1f1d35582",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56d1b163-a751-581f-9385-d509ad03f392",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63235182-c9b1-5fac-8904-e862e85fe5d5",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:673de6a3-cb21-5437-96db-3708c543dca0",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:868121d2-79a0-586e-9584-4d9c2afbed97",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:503b1644-91b4-50a0-966b-cc30cd41ca18",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65e5b9db-f207-5254-8bbc-16c8e2d71db0",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a94103b6-a554-55f6-8934-8f5bc920b57b",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:732d78c1-d2f7-5fbc-a8d6-4fbc4fc1fa79",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e3cf92-7d63-58cb-ba15-3f6ab760f687",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c410b6c1-0582-5616-9391-1adba7b70bf3",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ef9b42-742f-5f7b-8529-5edf6e33a085",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aa5bfd6-8ac7-5ae9-b9fd-cf5916b401d0",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18f64948-fdbb-5c6c-b3af-4c0350f469ef",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:987d0bf8-494d-5514-9a73-9c798ada3a47",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e024cd0-25ae-567d-a739-afdee18bf518",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3791f5-2fdb-5f48-b962-a8893fec265a",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed2239d-1ca6-5b9d-8417-7e83b72ee761",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b8eac5f-3a18-5cf1-90e5-69d4a8dfbb46",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32dea7cd-989f-52a1-a584-19a07bfb3603",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61b81969-3b65-5f3d-a099-9541699d3128",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a17829bb-5915-54f3-811a-7477372730ea",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40c5b86-8e9c-5537-8199-a6e1a9494500",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:658ca271-e566-5144-bbf9-35197dce7bfc",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f954713d-df9c-5e65-a007-056f76552144",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142027ff-f23f-558f-a465-71e5c0eefd7d",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b280227-ee12-5f5c-b4c9-3ec5143b7c55",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acbe9348-9083-5d76-9068-4b0b7747c628",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8546ea73-3251-5f27-a3f8-5f14029374f4",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c94db1-afe9-5d39-ad09-4b5ff58a8e9c",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e936bb14-7997-592e-81ba-9f4c5af8b620",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7456b2f2-16ae-55e5-812d-bc62990ac076",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-eval@2.9.4-tuxcare.9"
    }
  ]
}