{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:33165b75-bfc0-5cc0-8658-84bcbc7eb0c2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-fuzzing",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0b7b29a6-2ca3-5863-82a9-786c9f442959",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c847c68-81c4-59be-baa7-144a8d92b1d2",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a88286ba-e88f-5dbf-b6c2-5b781470df7a",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a780ba52-d098-59da-885e-74d6d571d603",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:046e3021-2fc7-51ff-a759-83849f56961e",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3023d8b8-286d-5d73-bd39-64486f6ffbeb",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:395ded03-0456-5f4a-98a2-650761734846",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85444ead-9c58-5510-bdcb-ead2802ea092",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1acb817-3a56-5f29-8070-4d5922f3c089",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1096a15c-4e2f-54c8-9963-9b0dba3761a1",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2291e70-f0ec-56ad-9f7e-7b782e4de627",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7905afa-c86d-5843-b081-f55130ca9669",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9126ef5b-3700-5090-852f-fedf92f5b847",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69c74480-6c4b-564f-be5e-a3d88f17c53d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3dd0e05-1740-5f5d-8bc8-6da5580b0c5c",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:620465e4-7096-5bd0-b442-f657892cba0b",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dcb8cc7-be06-5370-a12c-b0c870f7a1ca",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f95da014-53a9-55b5-b627-88f79f44c8b3",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0f1809-9e9e-5cc8-b37c-5981a17628de",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e615bd9-ec29-595d-9f87-2e372c871529",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8f5e3c3-9abd-5457-b4b6-2fa7f9759028",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c00a599-f84a-5003-ae54-228b4b040fa6",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e53523b-bf3a-5f98-a4f0-8bf94a3ece9e",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f50979b-56f9-5ae7-937c-2efbb5fcfea7",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72be887a-31d1-537c-bc60-6d9c69ea4da2",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f35541b-961a-5d4d-b355-9a29e8fbb874",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aca0397d-f28d-5b56-9137-4e3de5d2731a",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08bedcd8-8999-5bb8-967d-1e119e51df41",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:771f8e6e-5608-5f8f-aa30-f3a90ae540e8",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a14987c4-bb04-52f0-9867-a4aa5aacc90a",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e4b4259-138a-5376-b244-b003d2187e6a",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9897385-29f4-5ed7-8ddb-47cfbaf16ba5",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ee0ac91-73fb-5136-a03f-a5ed21fc5a8a",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb55d0ca-16e2-5580-a5d2-2be9dd179387",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52274166-5e3d-5ec8-bb60-6f47f9fc13cb",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:392c74c7-9101-56ce-879f-70ae0210389e",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59855f7b-72a6-571c-9daf-6d1a703765cb",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:248f2abe-c2c1-5c32-98ec-f5c14aa8409a",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce099d0a-8ec7-5186-91da-deb1755767e4",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c520b2e3-5e77-5d8e-b2fc-a2ff150f8ebd",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba2ff01d-5c8a-5144-a014-5e23ffc82efc",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a4572fd-15ae-5713-83f7-70ef032c537d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efd82919-231b-59ba-a0d7-8f06e52c1df0",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7650c94-863f-5f50-bab3-85d3fb453d99",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60d5ed9a-a216-50e5-93f1-1e6703e4e3b1",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c47a892a-1b19-52b7-8c27-f0bb004cc379",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58a078e-bd4e-5a99-9fa3-90414f452281",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d26e506-8af4-5ea4-ac8f-0d78a7c9e545",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2917dcbe-b345-5929-a492-732fb90b6046",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-fuzzing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-fuzzing@2.9.4-tuxcare.9"
    }
  ]
}