{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f9add25-b6ef-5794-ad0e-7586bc19ab22",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parent",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:018055fa-5c61-5f1b-9acf-24701da3b783",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7a23670-5e96-5917-8bcc-6f2e6b98f820",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c432a1b9-c7c6-5744-b534-782243f6ae28",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cefcc20-a507-530a-bdac-35633a80c8e2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f392a590-c0c4-5c49-8d22-e36f62a141bb",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65a43554-07da-56fb-948f-2e0335e63bb9",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f44d5d9-a069-51b8-b256-934c81d2c299",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f1dc103-5da7-5139-8754-d3bf21db068b",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:569e2e17-5035-5dc5-8987-b6803c791547",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a88b3cf-e5af-5a79-a190-097c0f06b5d7",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:195cb7bd-a110-567e-8118-abd905dd72d3",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd0b208d-1a89-5858-9962-3320bcbcda34",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32f88aa-0a8d-5333-b77c-faee3297b80e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d88d2b45-7737-50aa-82c0-c7ca05098cc1",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:246533f1-5e09-5019-b7d1-c99ab9bc8c3b",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67d99f50-63ca-5992-82b1-ae96da68bc9b",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d54b3f-483d-54a7-baaf-415b839867a1",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce616266-8298-5fb0-86a1-d22fbf9aafbb",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a4f4bbd-4a65-503b-ba56-30672a151225",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e57164f4-c571-58cd-8903-cd4adda1c7d6",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0de4dbb8-1dc2-5038-a10a-01a2a2074664",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968ed063-bef0-50c0-a191-8149294ad2b8",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f5ef4b4-6082-51bc-8e79-b82c04639a32",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e3f2ffe-74da-564e-9992-65eeafb5dc6a",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf4409d9-2e8e-5df7-84e8-fbdff03b1bf3",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:199e8b07-698a-5daa-87b3-6e34a60302dc",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5c55753-4738-5e61-a267-1ce0bc47fee1",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d19ed35c-4977-5a5c-a6e9-4d78eca92a0b",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95e8bb6a-8da9-5ed3-97df-a81c30a5bc36",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:169db275-0c0e-5546-b11b-2129233cec30",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3af3034d-9649-5b25-9a54-55913e46ae78",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93d533dd-af54-5453-b1be-7209096300e4",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a049adf-2ba5-5117-bc9b-7565390b5fb7",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b62c5862-f655-572f-ad32-1649ee9e1c71",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07418606-f80e-5547-8e08-1f68b4165eca",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d78810d5-7156-56a7-9160-f36e6a9f3c38",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab61fdaf-e627-52eb-9c35-266c8ca79d69",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75f979d7-5454-5459-8fea-6b2af93898f2",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd32b92a-b753-5f74-9a3a-1953cd6f0109",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc7caa09-ca0b-5dd7-b320-2049de52d2a4",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:552a8e5c-3481-50aa-b641-0bff05349718",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c5c276-fad3-5123-a0e4-9310f293c9c2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:909674b1-0f83-5452-8b0d-2816b8ff8707",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e83383b-66e0-5c99-8489-9ce54411104c",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea9ab72a-3078-555d-9fad-fcf149fbe143",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e9ef3c-5826-5d3f-8d87-929ce7122042",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2767ceb-c8e7-5f27-a2a5-08a318f4bad6",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73d2674e-82d2-5d51-8ac5-632658865956",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e7ff67-d13f-5f4d-8dc5-1f2da843cebf",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parent@2.9.4-tuxcare.9"
    }
  ]
}