{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:16f1fbe9-eee2-56ca-9cd2-e12a1abb2942",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-digest-commons",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:897663f1-84fa-534c-8caf-24038defdeff",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c5b4689-842e-574a-b3e1-def10b4ef6f7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb4b5c59-cc2a-5eea-b821-194a0b52efc4",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3f17711-8b08-5246-ae0a-2cfd29f1aca1",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:371f6753-8740-52da-9939-48332ce974e3",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a2fb0d-3c35-5364-aa16-c35dc02ad463",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2dc3070-04fb-589d-8ba2-57f8fbd6e082",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27e5f326-1206-599c-9d6d-d1b61b22936f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144f61b3-6d03-5562-a0ec-aa8caa407cc4",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4dd32a2-83f8-5dec-a384-2853d7147fa9",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0da7734e-aba7-5f14-9f7c-705c28197ac5",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:205cd990-e032-53d5-a868-3968e2647764",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88000a34-169a-5cdb-b88e-0ab54bde94e8",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a32831f5-b152-5b05-88cc-30ba78f046bf",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72d1a289-cb2c-510c-8a9c-a25ea635bc9f",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd7bacf3-036a-5fd9-828d-06b4316b88c9",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b374d7-e9f8-5196-b8d8-63e75f7050d5",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543ce19f-1367-5a00-a3d3-37bb689798b3",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf0816eb-2216-5173-937e-65a09f381065",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c83218e4-4a13-54ed-adb9-6465ef0465da",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30a98466-a243-5ea0-abdc-f0acc9130bca",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b93cec54-055b-5488-b5e8-560c84cd880f",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8479f0b7-e7de-5c66-a203-57af7f79dc87",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5170ca-7968-5031-9207-35c2fa11bc2d",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09d31c70-8487-53ad-b944-598c86d658a8",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00aa78a5-0aff-5fdc-be63-1beefc274930",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a995c9fb-b51d-50aa-a504-e32f811eef6f",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37037baa-e70d-5499-81a7-86c6fc9535da",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c69d90c9-83ce-58dd-9d7e-e4d7c948d121",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09de7ef5-6464-5f13-a5da-2349d5549b5f",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b37c30b-d25f-53ec-8a5f-869f9afc0371",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fea6e23e-2656-54a1-b7cb-593093f44536",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34a7bfd6-91f9-5de5-9f4b-26bb98c33d1d",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d3e15d3-ae94-5ef9-b68a-8a8ae98e2d43",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b39722d-6bd5-5519-8d70-6141440cc5e4",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:201e783b-31fc-5ec9-957f-1ef075a4a077",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3fab2e-5bc4-5b2c-b0aa-72afccbaa0ae",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cf9b98d-95c7-5ddb-acb6-519577d07a5e",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb58dba7-6dc4-5019-b4a8-b1d9e21de255",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d163cd57-2512-58d5-9b92-c808667c5e33",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e9715a3-26a1-5b92-ba03-f0a58c5941e3",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfebbfde-e5cf-5875-a632-655b71d22478",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1c7bd44-ff5f-5425-9369-76023c378c11",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0fa0207-3ad1-5ba7-b1c6-9a28b875f427",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b3a2b19-bf62-5cee-b29e-e15f5ece0e2b",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8269378d-4a7e-5436-9e4c-7d1860a8ebfd",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ae7819f-2f22-5e8c-811f-d5a4dab04e9b",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf2413a8-fdd1-59bf-87c7-dd352474bd30",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43309f1e-6dd1-5bb3-9383-a74aeb485276",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-digest-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.4-tuxcare.8"
    }
  ]
}