{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bbf38fc6-85c7-55cf-8506-2c39e112ed8a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fetchers",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:592b8156-4665-55e2-948a-34cf7bfb5e6a",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a316ffc-e77a-5d44-aca8-679a01b092a7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bb4176a-5729-510b-90ac-a3dfdb71f2b9",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1147ccb-8184-508f-9236-604593d519f9",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e40168a-e9b2-5248-a1a4-5f2fc068c248",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f28910a8-415e-5b54-a791-84c2a8de9f1e",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a3fa263-e124-55c0-8f9e-1b82becff65f",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3d02809-84e0-528d-bf0e-29349d2f82e3",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7fcb3ba-a97f-5488-8baa-06d0ea789b8c",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d181dce-6f65-5218-a211-4b1bf2a67978",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71935f52-20aa-5101-95ad-981e8555ec8e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b96da31-8e76-5c57-a491-daf19a66fc6d",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a717ae-3c9a-5d71-a7f2-19aa8ede6154",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3692c81-2d0b-5d6c-a21f-c40756faeec3",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d306cb0e-fd20-5f82-aa1e-3d63c172b932",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4908f6a-ab95-5179-a505-9f295c9f5f37",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c04638b5-8f22-5656-9a08-abdb32452912",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf6b1662-fecc-5b09-93dd-41c8d965f808",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00777dad-980c-5b68-ae9e-1eef0a515d21",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48e53535-2d38-5e6f-bed5-3b9d9844f5d8",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22bfdf19-8d75-50c9-9528-f5bfc0850063",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e8dec6f-03e8-5747-987b-e9b725597b41",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8c23f4a-bc0a-592b-ac3f-bb9ebf216bde",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0083f1ec-c428-5387-b8bb-4104c7a61d67",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44f5ef80-0fa1-5bde-a68a-b43810159a26",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fbc7b68-d9b0-54bf-8218-82272f2047b0",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e65eff8-8808-5ccf-8ab4-2f860370ae0e",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea1ae4db-a9f0-5e7e-8717-97d3059c7d2b",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d6eb670-66dd-51d5-86f6-f8af23f33554",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8a80a7c-4501-5906-8ae4-78c2d3cf450b",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1209c115-2dc9-505e-b741-210e07901f25",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:263f1f6c-923d-5d64-8be7-9ca93790dc85",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7effe6ed-449b-54f3-8778-7ecb02db081e",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c22732ea-6acf-5345-b096-bc9adce67903",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc747f42-ebf0-570f-ba64-583684353198",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:959942d2-6669-5991-9219-487b4294ac74",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f269b459-b62d-5797-8e1d-0ba5838aae5b",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04d27411-72db-5e25-940a-5224ab553c2e",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6585424a-bbad-5882-8424-b19e02363da0",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf82b159-f2dd-543a-baa2-a24eefba258d",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8781bb3-cc00-5e65-bff9-df07bdb15134",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b018258a-6afd-56ce-ac1a-683f9ba2d51f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd1eaeea-cda3-580d-83eb-33ba12cbe011",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aa9ef63-4da0-539f-b260-d0d0e4ee2fe2",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84ddcf7c-0f18-58dc-bae7-8e8f520d6bd7",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e4c3eee-71f9-5736-9301-8af882816a3c",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b44c7bc9-8d9a-586c-8dbb-541cd92bcd55",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49a49671-c701-5d6e-81d1-d2b7d91515b5",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01dd1676-ace7-5fa2-859c-e083e193126b",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.8"
    }
  ]
}