{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bc0efa8a-5118-5b7b-95dd-f8e970a72504",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-font-module",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:67f8a3f7-4804-551a-af44-c71d70dbb2ee",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f547835d-7299-57f9-bcf7-1d7115846890",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5c16ebb-04bc-5f2f-a14c-8bcfb1942fb4",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5b32404-b809-5303-aa41-a0e2caa06604",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bb8bef0-0a18-5565-91e9-6025b5c661f0",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8efa7d42-04e3-5cb9-9a67-1de368f3b668",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f213ceeb-bb5f-5d97-ba0f-c095571260c7",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2684390c-ef50-57ef-83d0-356c11a83d2c",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8502c189-129a-5f4f-a14c-faf9d4589fe0",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:799304eb-9085-53a0-83f5-95ada79c2b68",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be95c6fc-4125-5457-b64e-a1545db46777",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c9ece93-7e77-53cb-b799-ccf7700dc574",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43331288-d79c-5b83-9986-2c94bf68a68b",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab1dcdf-dcf2-5fd7-bfa1-c76babac6273",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5e6f9d4-c177-58bf-9fd2-8c94fc023e2a",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89eb625d-c81d-5066-a93f-732359e69890",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5faa1559-a978-5d12-987d-e7934ba7d3b0",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9872daf6-511e-5688-943c-f1dd9a69dc8f",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24785bcf-b02b-5906-96f6-fac6e178e3c4",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d1a8d3a-2123-5117-9785-499d8172222a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c9f480d-e606-5b7c-bdb6-0e515795a5ea",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4211c8d0-6538-5736-a767-73ef23570014",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a16b47c-952a-5bfa-8460-3496aa6798bf",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d66e868-944f-5df9-9690-622611f09f7d",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d9e906e-041d-5a72-9107-4e369d1ce9c2",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2603146-aa8d-5247-9e43-2a55127b21cd",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d1e0973-9b9f-5c77-9568-70cd71c497b0",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ae78d9a-51a8-5c6d-9e79-0113e23a386d",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9302cb4b-f3dc-57e6-abb0-048dbf963671",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21c7c236-8d0b-56c4-80f0-bc8b89d3e163",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c368852e-fd5a-58c7-bc9c-ab1b2bb6a861",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db98d730-b209-5fa7-a4cb-a83485d4368a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63177cd6-6907-55ef-91ff-9bafefd9d491",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d542fdd1-0ed3-516a-8a1a-0bcbe82a33f1",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b995b673-adb2-53ad-9470-99b9417423bf",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4c58972-d464-519d-8aba-e444c38c4bf7",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1df9fefa-e5b8-5e9a-a345-ca242d830904",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5447d5bc-e3b0-53b6-8c04-3d0175f5f630",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:508b3c60-4f9f-5989-a95f-9468667d1700",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6076afda-3706-557d-8d8d-82fdf1f2b425",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a4671e0-9285-5702-b2c7-cbff16e961c6",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2315e7b-47ee-5885-8732-4b67b81e3412",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8c0aab6-7fd4-53fc-b618-cc25d13b52ff",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6adc66e-39b2-580a-bad7-76c6af1477e1",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16918628-c740-564b-a1c0-f082dc46b36a",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a490b8c4-c783-5397-9f06-890bee23f762",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62dc236a-54c0-53b1-b1f4-3b4871ae07d1",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16c6beeb-29cc-5d67-83e5-9a47f747796d",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c358ace-4574-501e-9e78-c54bb970cdae",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.8"
    }
  ]
}