{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:00a0226a-e63a-5e89-820a-40ee72c5e4e6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-font-module",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8a4dfe55-4696-52c6-824b-94b67862d168",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e05c9219-a8af-53ee-a70a-88a408bcbdf7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:780b5fa0-d94e-5f34-9cdd-3d65a8bd0771",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12921ede-fdc5-5850-9da8-53919f1503e4",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f7a6bdb-f8cb-55f5-9655-16a21ac3af64",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4ee68a6-aa70-5594-a9b9-5369d319f878",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e9f2d11-3742-5dcb-bc6b-0428492550e5",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8677e590-1d8a-5637-b378-38061b488cc8",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b684fc3-517d-5b6f-8299-02fb57a98091",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c74d87e5-6668-5ef6-af51-6c7a0ae47e6c",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2831ce1a-2269-54f3-9427-4680464bf7a7",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80025752-2e31-55df-a0c5-4a5031bece57",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb6d893c-9d68-5519-96ff-21e76480c6fe",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5589788-1843-5207-bf24-2fe4090fb3c3",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82e34c0d-3b21-5e5b-b3cd-4e8eb2fa07f5",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389901a8-856c-5dcb-8dce-a7533bed9e6f",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7caa194d-4f27-56d8-b924-11f2a2639f2a",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0fbba88-4e26-529e-a6c2-3241ad301ea7",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0678e34-6004-5a33-a782-210999b4f0f9",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c61f6e-fa7c-5b69-a3bb-b80e41c0810c",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:209e9382-cfe9-5dbc-a1e0-11ac8c48e9ab",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caf63f4f-797c-5492-90a0-d792988ec45d",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:833b35e5-4f7f-5eb9-8035-182f68337239",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0f76369-30d3-5f10-b6a7-ce0f76ac5fae",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d69d9574-db36-5a49-bbde-652db6472f3d",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703737ec-2447-530c-990d-d1e25d32f37d",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c04dca9-4c40-57b6-aef3-c5e0822eb9eb",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d276888-8ee9-58a3-a988-7a27490a9b36",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd83b2b0-48b1-5681-9b79-a68de01ac465",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dd398a7-0879-57b0-932a-02c891d61c24",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73eff7d7-a209-5133-ba52-1f3be85a0e40",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6119e91-8181-5acb-ba04-de59599862ea",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63c3c530-56b0-58b3-b915-ffca17130b9c",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7359e548-16aa-519b-812f-615469692696",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ceef78-720a-58e6-b9c8-321617d2f57f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28be33e5-4334-504f-8179-81da57d95592",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f32deb1-8a1d-5578-93e2-01493b9bb3f1",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80151587-337c-5b1f-9c2e-debb313b8dba",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5dd1272-53c5-589d-ab21-49553535d219",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c99967d-8ec7-5d20-8775-df5babb0ca58",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58effc7f-ca64-5a42-89c1-1a3a3f519e9f",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37098c70-44a3-5950-92ce-224d5dff461e",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef4f446-c8d8-5d93-a14b-8215aa09131c",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:044778c9-d1e6-508a-bc22-7831330187bc",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d3a636a-a41c-5c0a-aab2-4b5b1ffe334c",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5848520-35a1-566f-96b9-51f3e2916c61",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a363016b-b199-5d84-ac47-9233fdf0ff84",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f83ccd6-621b-5cd3-9221-fab87eca74b1",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a44b158-365b-52e5-85c4-da56b6c989e1",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-font-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-font-module@2.9.4-tuxcare.9"
    }
  ]
}