{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12735f15-c849-5f5a-a42f-d2f13ad7f2a6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fetcher-s3",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b5730594-57de-55e8-b0a8-28cfa4987bf0",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2e64148-e457-5311-a425-f9c1d11f3830",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3adec69f-af2f-5f5e-9469-b75115f2984a",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e79d369-1984-50fd-87d1-eb23bba34633",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bb6b3bd-8d8d-5c87-95e4-912661a8f561",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30ede507-fd35-5396-a76e-549fbfbc9726",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32fe84dd-9fb2-52fb-b336-dc4a4a896965",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e21c892-e7d1-58c6-ae99-6a1ebf7d3cea",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:227910a8-0d5e-58d0-9199-e01067ba616b",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b054135c-501b-5d25-b0b6-df8b6c96f70e",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36bcc5de-bdd2-5f2c-9ef1-622963e27294",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:937c4daa-a728-5980-b6b1-edd49c5971bc",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24f89b9d-5d04-5422-882c-ed6aeeeb9a09",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e734b6e-ac2b-57a6-b184-eb8180faa54a",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a42c740b-f5a8-538c-b317-9c781dfefdbe",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb6bc60-2133-53fc-bebc-dd4d70c6196f",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a95e591-e6d0-529a-9332-6ca2e9bc4b32",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15b25639-cbcc-5338-9eb2-bcd26fecec43",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb26e84f-1713-5d62-b980-617281b5db71",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33353964-bc2d-589c-b6a8-19ec7a6685e3",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e07f39-8f59-59c3-8b83-ee1cb9e43c37",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ff15f8e-c899-59f3-a6b5-59e4ef4473f0",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30c275c8-d4d6-5dfa-b704-172377287dc5",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:328ebc0e-603d-5b05-bdcd-e064f3ca3314",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e4dc4b9-663c-56ca-a8f9-522166de7202",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ef5fbce-18f0-55df-8dad-30b452467c45",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfc8843e-02c7-54e4-b4ed-4bd947a95292",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817f7c5c-efe6-56bb-a1ec-7fced0ef02f0",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a7f7a16-bde4-5292-b2e1-92d00adfb468",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0757556b-8930-58dc-9d19-0430b75e31ec",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4691cdd-6b70-5647-a298-95862b65f31a",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33194e0b-6e30-5186-a48f-019b40cdc490",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03f23eba-7317-587d-ab18-218df28c4b42",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc0583f6-cb8f-554d-a870-62d0834834e8",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9660a8-3c15-5d9f-9c59-86ce5e09d28e",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a63b30-56ca-5d59-b684-3b1e5d3b5be2",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee66d1af-cb03-5274-8543-d50d2ec1bc4a",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55bdea21-dc3b-548e-a555-560e5f6fb2a6",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52408f26-c7aa-577e-8ab9-d96f752bfda6",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edc88083-9a34-577d-872f-23f2ab2243ca",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88f278ca-2d78-52f1-a9d8-b1d29fec2725",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7479b30e-4c12-5121-bf7a-b40232c40b54",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd1facb-e719-50da-9628-8c09ce5eecbd",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4e98c98-d9b1-5465-951b-6720ca7645e1",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9522fc-578d-5394-89c8-25328f435a3d",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ae05019-7ace-57eb-9de0-110a0528e338",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04831e73-76b8-5874-aca6-bc01ce80b21d",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f41483d-fbb4-5e4e-8fb1-8598536f1718",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea9a82c3-8961-51cb-aa0c-2fe1dcbc01b8",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetcher-s3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fetcher-s3@2.9.4-tuxcare.9"
    }
  ]
}