{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1a7cb424-a65f-5e10-8efa-dd4ff8108fc2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parent",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bbac207d-2daf-5de5-b520-d944ed2e1445",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecf0cad4-a579-51ae-abf1-1ac15bdb3b91",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddf0b1a2-936f-5cae-a1fb-c41086ebb610",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2187c69-9f3f-533e-acf9-9809865da964",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f304928-f849-577d-9008-e7fa320d3676",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed4fc90-4890-5303-a0b4-463c3720db14",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5896b5ab-d532-5adf-bf70-3ffa6002e88e",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c489b22d-928a-598a-9ab3-556daf470112",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2e56e23-9353-5182-9bbe-8f843d842d92",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7960364a-2100-52b0-afa3-5f7414d59f98",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:262787e6-d0d3-541e-b115-b8a9b7862b8e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67578845-2ae6-58ae-8763-4ab08fa89296",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e41c3643-411a-52d9-9351-c7fecf2e3a75",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0f3a03-20e7-59ef-8abd-f9a05b084aca",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69bc251c-2177-52f5-a8c7-dece4d4b5216",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b31b8d6d-d301-59f7-b433-7e0df28b149a",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1db060fc-43d3-57b8-8c3a-5b7b565a8660",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:353b57c4-b2a9-5899-96fc-7a14d8dbea16",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ba489d-8e3f-5fbd-8eef-313b0855f522",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61d31458-5062-59e2-91ae-5b276f38f850",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a487f276-81ed-525c-8bd7-4ee8a90241c1",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1a8dbf1-50e2-5cef-8931-33a2b79a9154",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6868fe6b-e803-5617-8465-35af9db27f9c",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80b2be1c-d233-51b4-9e60-6665965b8191",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44dd388b-a272-5135-8566-7ac44dc2d062",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fae6af0-c9d6-5801-a2b3-9dfdafb799b8",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d18d203-7b27-591d-887c-1763b1585db7",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36172506-c383-5577-9e3a-71e7bad58f4e",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81d518a1-fb89-5b90-ae14-3f0031c3fb6a",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd6f9f0c-976f-5beb-892d-0a015905ba71",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84a79e6a-532b-5f76-878c-649559ec93a4",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a707ac03-1a41-5ee7-b778-870a14bbaa8d",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66fd477-345b-5487-97f8-8464bcdf4c3a",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1487ff4f-116e-5807-8a37-16efcb42ba96",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f04e31d-fe03-5233-801c-f6619ea58f79",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e392cf7e-86f5-5aa6-893d-ef2c009b8bb0",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d55eacb5-e630-59de-8e6d-c89912266e97",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:734637a6-16d3-5341-9cce-3d07be35fba7",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a629bdcb-a49f-58f2-976f-fbb0dda6827a",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b62b1eb3-e615-59c3-90bb-fbdaffba122b",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea52feea-7b35-589e-a0ce-f621c1684046",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9daf8c0-0302-5eab-ba31-26ea208f828c",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:522d2ab3-4609-5afd-8057-859bd1f36af1",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f68a039-511f-56cd-a02e-0451248022f9",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:650f78f4-c243-5b9b-a84f-4bd914e6bf0b",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4f02b08-6c86-50b5-b222-d67e52235d6f",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25994d28-465c-596e-823f-ea67eaba4169",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39b48c56-63de-5b9d-92d5-58b510bf2b8f",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb31475c-839a-510f-9775-e5d965276a40",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.8"
    }
  ]
}