{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6da4f62d-764a-55c7-a368-36152b8851c4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fetcher-s3",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f60ee0a2-3a35-56a3-aa5f-667b8e4ac5bb",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f879665e-c007-5e89-9f15-3e5dbbe94f3a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7ca7c23-b653-518e-a2b7-679c37bc9546",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:636d4955-8164-5631-914a-c90862bf6a0e",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76f7facc-62c4-505f-ad6a-d58d61bc2618",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e25a4bb8-fbb5-510a-9f75-9d38f0390f40",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4b78895-d4fa-5ee8-90c0-cfd41810e423",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d66e1f15-f573-5770-b06a-048ecb0647da",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d154d422-c3d9-5dda-b10f-647402eb34f3",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458abfc6-8e8a-5507-a620-d6d902b66d76",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73fc8f08-2654-5942-ac16-6ea96e35806b",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0792bef6-c633-5afb-9654-2b4eb6234923",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:776a0a3e-a9a4-5540-9a8f-f3d235b87308",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ce9783a-6806-509a-985e-548bacf1be59",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee159d38-3ee2-5c84-92e9-543ef6f9f71a",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980e12da-2d28-5cc0-bdc9-9b65f2a07a1d",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b530fa7-0ba8-58ec-a6d0-7f672f2e193f",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:431532c8-5565-539e-8bc7-5b1937474008",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aab772d6-a52a-5761-8098-a5de7b290112",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f333d19-50bd-5c13-82bb-ab5e15141fe5",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d1b71f5-4120-501b-a19b-b4fae7b8534f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:920f7b8f-429e-5ff5-847c-3d11cdaabdb8",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:842da17b-f034-55ac-87a9-3bec9f989287",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6526c819-e345-5528-9960-661ee6ce65b3",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961875a8-3409-54f2-9ead-d88b2cece008",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:758fc445-53aa-52af-bbd9-fe1670356ab0",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc1bb22a-8ed0-50b0-aea5-01592583ef49",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25393ba4-476a-5763-a704-e52e01ac4dbe",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f29921f9-56fb-5022-aefb-40613ccc59f0",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa1bb903-56d3-538e-a48c-53af984464d7",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48c6fc34-dd95-57f6-8e92-6d1f4fe346ac",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:811456fb-9024-5034-b3b1-b34ad5dbd0e9",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9dda714-f781-5b52-9154-b063cc1cb927",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a47a72cd-c27f-5452-9441-3d19c04015cc",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b18bcf8-3aee-5c9f-b5e8-b8a72a9eca31",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e98c429-33f8-5dd4-b54f-44f9e57a2514",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f982623-de48-56d9-907d-0c8be5394383",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc61f0f7-a933-55fa-a63f-1d43118e41ec",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f12e44e3-342d-5283-9393-081e1e650afa",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b43e01b-27f8-5497-8ca8-4026ac5e17d9",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70f4cfc2-2c7b-51dd-976b-d60b09081050",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd9dc67-ea56-557b-b10a-7f438760ce1f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f532f8b8-6b87-5abf-9294-b7234339c114",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf95d97-d693-552e-8e1e-36319235cdaa",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bffb7cb-199e-5348-97a2-4d5edca90fa2",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f5772dc-eebd-5a98-b2a6-58f7617e2268",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e6a3f0c-dc43-5144-85ea-b229152ae106",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:897d774a-25c1-5a32-9117-efc3a962bee5",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0adabfeb-8c2d-5cce-9b3b-ec1708dd5a1b",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.8"
    }
  ]
}