{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:66e93c7c-d17d-5537-9ff0-047b85f5c755",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-java7",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3a585aca-6599-500f-bad9-3376376620b7",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22d4a9a3-0d10-5a1d-a060-759537b9c34b",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88a01421-a931-56c2-8035-75ba54d75efb",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:040f3087-4ca5-5b61-9206-378fc775c02a",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa45390-e2e1-5e63-a95b-5a5e9cd64476",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8687249e-4c6f-5289-9706-692b054b5d86",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3745004-b0c1-5983-a438-4ba3751df9c2",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50671d96-ab81-583a-a1d1-2adc50ec5e43",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7231bb4f-99e4-5285-80a2-950cdfa9c6d4",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:186aa3c6-778f-55e3-a3f8-b64ce0a0e44a",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f43b215b-85e3-53cf-aadf-a8a203300f09",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46364c2a-ec11-5f34-bf3d-b51fb1cbe807",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9b523a1-dbff-5e41-a329-2c75154477d8",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:291521f6-3fdf-59eb-afec-f651b01367c8",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27dc2e48-c9f3-5be5-b138-b346da608b4a",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a6b542-db3c-5d1a-ac98-aea10cd7efd1",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0abfa97b-0d8c-56ad-890b-dc388c10666a",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e446c6d7-c4df-5cc5-ac19-9cf31b8c69e6",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20b1edca-4073-54f3-9368-714b723e8555",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33524b58-51ff-5be1-ae9c-47af89c661f0",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:934cbc94-3074-58e5-b675-cb7250548239",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dae69cdd-f19c-5d25-a0bf-2eeda58a1e7a",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc41ebab-3f86-55fa-ae48-08073e1fa5f2",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:447f7e4e-7380-50e9-b376-f7790e93e99d",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3fd2d21-eb04-5536-87de-d1b0b8824e69",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:447d0b1c-6547-5585-9114-3ffa2a8050bf",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e895a0c-6de0-51b3-9215-20154ef8eabb",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c53fab52-d7b1-5082-bb4a-c384177e78be",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55c54f8a-0cb3-5a84-812e-37efb3fa8457",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c762377c-529a-50b7-a1b3-dcf3f5bb0466",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:254dfd4d-c57f-52b3-8834-c4eec43ccac6",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71c890d7-2590-54ac-84a2-6d6a00b0b614",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2497baa6-8b9d-5953-a5b2-486f66370c4f",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad284963-8fe8-5112-97f7-f263c309e3d1",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5625ac36-2a26-5229-a5b1-99b976e8f652",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a01e80b-4d0c-56da-9a29-68537ac53c4c",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99c45321-5b76-5184-876b-6d8d47dca3ab",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19c6138f-3e26-55e7-bc26-0041a043afb2",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24a28661-801f-566f-8bf5-7e2530ca3ba0",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c6b1b4f-2d74-566a-826d-af191ee7d6cd",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14394980-c588-5399-b572-615ed0582fcc",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c67452bf-40e0-5065-9d24-e85ad204e5cf",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:658f076b-b552-5dec-8a96-0bdc4fb31cef",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cce114b3-bcad-5398-b1c4-b1c702e552b2",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5844118-77ac-521e-8bd1-0cf798584848",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8914548-a660-5641-9745-407692b01cd3",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b4bf1db-7dc3-5f39-aff5-d9f6882dc4d7",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55651ad3-2665-53ad-a8a3-23a3391f896b",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87cd02be-7867-5c51-a879-18feefa27219",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.9"
    }
  ]
}