{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:de3119e9-9f67-5464-bb10-38ae09ae59ef",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-news-module",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2649012c-fe30-5c30-8029-1674c7feab1e",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d8b002-357e-5210-8ad2-8707c588b9a5",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af8b5ad3-c523-5ace-a838-a5c833134d7f",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe83d0bc-ff6a-57e3-bff4-1dc832681c19",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6761f0f2-6b5b-5cc1-9ffa-84be999966ad",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79daa538-4842-5cd0-9d16-6d8fc1940cc8",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f87e4b5-2c62-559e-b3a0-70425d7c0dce",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d37a6995-7d05-555d-823e-708fa7ff8c26",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3306dd1-6930-552e-a416-a4d7f98d6780",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a4f8ca-bd5c-587d-8518-9a1b4c9da382",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b95a0769-c363-5c5f-954d-986f594c0557",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:852dc4b1-2a3e-5d67-bfd1-867be34ee221",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec48d4fe-e149-5652-945d-f28754e96ca0",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bc2fd6b-870e-5efe-9c16-dee23d6c1cc1",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf9d8f21-54de-5c8c-bcba-1c4ffe688228",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2ad542b-e25b-5aac-9ba8-da3ab48f0e61",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:725d3e8e-a2ac-5fb5-afb4-dcb268e500ef",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1df6491c-ac25-5029-ad7d-7cf66e608460",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87c0ec3b-d277-5325-8382-9e626a30076f",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:705c0614-9213-5e1b-a3b0-16891e603952",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47ff0d6b-2160-5366-aaf8-7c8c8458670c",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f981034-3808-5207-9a7f-6aac5803e4d6",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d1b636d-12f5-5cea-8d2f-ea113381899d",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d25d77c3-a9c8-5566-ab8f-5d60abf37a8a",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca34e759-1733-5c51-b440-07b3034b6d22",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65264de2-0218-597a-aa3f-bb42372d6b7b",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dbeb8f8-2399-5a8a-9d70-c0517b3a9c93",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4215df05-7c27-5367-a07b-071c8eb47f73",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fded526-49c8-5c6f-b200-1e6a1653a4f6",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39f828b5-23cb-5518-8d74-bc8540b09585",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29251205-a184-561e-a740-1f2cd5dcb97d",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8c5b6f3-2cf8-5274-8135-a2411903349d",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9824f7ed-42c6-5413-ac50-afbb2efafee1",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5036347-972e-526e-90dd-078aaac49315",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45398f38-7e45-519b-8ace-eff3a122fa1a",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b714d9c5-1284-53c5-8a8e-ab085fc95366",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2ae7a82-c860-57bf-9b4c-dea2352c36b6",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7e32b44-e971-5373-9f0c-062bb5e10a81",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:888f7598-ff75-54e6-b11a-1d4547eb91df",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458df65a-3b1e-58a5-9ceb-919aa52ce795",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab47d798-ca01-515c-913f-4cfbaf27b579",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c111c12-64d2-5456-85c2-bc189af31d4b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:595676b4-9213-5327-ae73-f7791733b3c5",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aeb339e-0eed-50a9-af03-bcf028335bc7",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62aab9f0-1baa-5e47-b739-9313df7977c6",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bcebc41-2db0-518c-836a-5877d09202c6",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c23a35d-623a-551f-b735-8dd780990ff5",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fe165a4-8241-53b8-9f78-031132aa8ceb",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae609a6-ddc8-5be0-8e7e-126ac7199288",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-news-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-news-module@2.9.4-tuxcare.8"
    }
  ]
}