{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:16342d37-0a1f-5d05-9983-6ea921a769fd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fetchers",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:db1b226b-5a8c-5b2d-ab2c-fd0b18c4cb1e",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe319c7-0247-54a5-ae5a-46641c001a22",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a480bb7-a514-5cc2-ab17-de7e45e389e0",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c30ed005-01c6-51b4-9ed5-16377efb3196",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e11f1637-2d7b-5a5d-9798-f254611f5b87",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:820502c1-b43b-5839-98d8-dba75cd19b4b",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6faf735-6840-5100-8b3a-f9c91eb0d751",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e61e361-7600-5446-bff7-27f946f0e1c2",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f53f327-753f-5e29-b499-87b37ef5ef4a",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:555777ae-11f0-51e6-bb2e-d4687dec44af",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:303acf5e-c9c6-5d8c-98cb-6a5e31f339f2",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:035e02be-b58e-545e-9e67-a0e8ed814ea5",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c123135-0282-5f05-8736-2b3bdfcdcf83",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbd4b473-14f2-5e3c-96ae-8f0a5cff47a9",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5982ad04-7318-5781-ab20-f9e5b4d3e5de",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d0511c-c600-5500-a7c0-69caece43c6f",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e205ee9-cbc0-53b7-97b0-f8d1a15629da",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82135690-e9be-53a2-81a3-dd7b8af17ec6",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48b58150-a8ee-510d-bc85-3da1816975df",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c10b977-d4d8-595f-860d-75e90c35cd16",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1fc6fcd-5f03-5634-b8bd-cd3041023b68",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cdd2bdf-13c0-50a7-aac5-f696b64d9c29",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baa7ff9e-bbf1-58ec-b1d1-a0d381525985",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5ad782b-e53d-5a08-87fb-a57ae9a34211",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8429d22-bb58-5535-a082-099296938f22",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d23cdf6b-2108-5fc6-ab18-e1fccdf3892a",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ae20329-e4e1-53ed-9771-2925085d52b3",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:461081d1-619d-5905-8dfd-9fd912394b68",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:811dff7b-f21b-55e6-84cf-130ed10de6c8",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76d4f556-1850-5c5a-ae1c-20305cffb46b",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6dd445b-2060-5c7e-9824-06f4f8b24463",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49caee7c-54c4-5ade-a439-39f517981a5a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e46a51ea-6b2b-502d-a225-607c2f353394",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd0614f5-359c-5929-b37b-a797ab88274b",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151a0d1f-a68c-5de9-889f-7aaf92d6c27f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05d172d7-4819-58cf-a60c-8d86685b3a99",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dce1e865-b8a7-5bdb-85a3-0dd16e1619ce",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba1d16c-aa7b-5648-aacb-918fe904c380",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc41e819-c218-5dfb-90da-bcc9616f5a0d",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85fb86ef-e7b1-5357-9e4f-3c1d1125799c",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:738c2a1f-7671-5a38-a6d7-f72802a07d64",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4e0ebc2-30d7-56e2-b054-21fede4edde6",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b2820c9-76e2-5d86-a0bc-5bf57ae5ecaf",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43b102a4-d54e-500e-bb76-6b507bcf2c1d",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a76b0d-ea7c-5bf6-8f86-e03c13b99865",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82a23dff-becc-5978-b755-5a07f03f5972",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:424dbd3d-6ac6-5559-a8d3-e6247f868758",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c7d4fc8-e85f-5e5b-a4fd-73d137b120c3",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2565ba6e-e6ef-5c0a-87af-b24970b14100",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fetchers."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fetchers@2.9.4-tuxcare.9"
    }
  ]
}