{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ca9f1af3-c147-556f-8bf5-04544e2c33a0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fuzzing",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:968588a3-4d36-5ea4-bcaf-4ad64cf75282",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3aebf6a-4bab-5658-b164-9b6172eb18df",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:939b51b5-cd3f-5fbc-be6c-727a8d6df043",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21f7ec60-eb45-5a9a-a136-c72f5e49bef8",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17e83c3d-17e9-5a55-97a4-ac6509e15e88",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15d69abf-6e73-5728-aab0-6a10bf98e418",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79660f99-9f0d-5de9-a77c-be69b88dde22",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:454edae7-312a-5261-8d1d-43f04469ef9f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfd90b06-da34-519c-8909-f10dd7c27e0b",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50d7039c-855e-509d-91b1-8b3c2eaf67cd",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a827c25-a949-5322-9451-566d8d44bc96",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:452481a5-e4a1-5fbe-a5e3-fbc5b39fd61c",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fac7f53-12ec-530a-927b-a07601ff7128",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66d57b88-9ec7-5e3d-80ea-8d74960e1d0d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6072c1ba-d098-5cb0-90ff-6d35868a30d4",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1921b8c1-4000-5a4b-b9be-2ea9ee53d1fa",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ebb2d8b-fafb-503a-bbb3-d792cdcd13a4",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72d13f80-3454-53af-9c24-43337be9f4f7",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de826f47-e896-55f2-b330-0faf6112b151",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ae49b3e-f54c-5c95-89e5-6a9f9acf9508",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96bf503a-0596-5c92-8559-8e8e941f7573",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb729a3-7d62-54b1-b439-74def640da02",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d98bfb2-1f6e-572c-9a09-ff581bfdc1c5",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cbb9421-ac5d-5ffe-b55e-d134680d9613",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44ff7e48-c265-5cda-b825-ae21e1634cc0",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3054df1f-8c59-5ff3-9b07-d4127b3ea275",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14307247-d016-514d-82e1-26176dc359a7",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:609a1192-6c43-51d6-affc-376e4443698b",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb13b894-94d1-5ebd-a9e9-da8068d45232",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d344113-6eb5-5fdf-a1f1-bbf8d6cb9839",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:392af8e2-2f37-5230-be35-c34904722e9e",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6b5ee00-032e-5cfc-8312-66db238348c5",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98a5bf69-ebbf-5704-9738-1f598fb790bc",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11dfae27-2c08-5d77-aa22-5de859a9dd4a",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39908ddc-58b7-59a1-a6bb-c05da33d9484",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6317fac8-d6eb-5bd5-82dc-e87838105868",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b79625e-008b-57fe-aa72-4e13ccfc2727",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43ce7829-8cd5-5e78-a076-cc65657f33e2",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ef27af4-b4be-5b42-b3eb-d06267c1c901",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2f989b-ca8f-52c0-a1d3-378fb9559479",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01bc093c-0265-59e4-9fac-b22be3af5653",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d772ff-42e8-51e4-aed8-25e423491bdf",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d03dd29-0b28-5230-a81f-e6837f47a430",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964f65a8-62c9-5d10-9c38-f81f8db2b243",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87e80f43-dee6-5643-8f2e-41c5dc40713f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a20b7328-9d75-590d-adba-4ed893ff028a",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:009e8cf1-5c43-537f-8e56-c4c5387f7e97",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:782d8c4a-51e8-5c3c-a803-1ef08260dadf",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae540a22-6554-5c5b-8db9-40e825e7eb66",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.8"
    }
  ]
}