{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0a55c205-4f0c-5048-8af5-98922e56f572",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-ocr-module",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1cd062be-d51b-50ca-9095-7956b1090d5b",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dcb4393-fd3e-52fa-953f-91b2f72a8453",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8849ccb8-b47d-5aa2-86e5-8bf02296405e",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1c0739-8e63-58df-bde0-e4ef7b42a2bd",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bac2ad0-ff72-5526-9c22-a36d62617a69",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bac902fd-75b2-53f8-aaa0-7176af3d2b28",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c4c7972-b0c6-5bd7-854d-852a07cdbcd9",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a020e783-8455-572c-93c7-d55cfd7720dc",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6896e7e9-9dcb-5cd0-8c41-94b3f2be58ad",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39f87d4-5445-56e9-a39f-a7574e01709a",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efac077f-e2af-563f-9cb0-eb8c8969a4eb",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f62db89-9d35-51de-ab7f-0c063281bf82",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2682b8b-72be-5d60-9fe9-bf5f9b3bcde6",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32f6990d-bc90-5903-878b-829a70a4c40e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6906db33-c6f6-5a12-9c17-ae8f4c295800",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbed7667-785e-5ac3-93d5-5d7334166713",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91e38888-9938-5282-b801-b8facbf0bdc8",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e19fcae5-28e3-5034-aa37-03097a823553",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59a65e32-2905-55e2-aa9e-6dd63be0d433",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:714738c0-a4eb-5513-8a57-6e6f0ad62935",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d3b8afe-dd31-5385-b599-0038627a7598",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac5ed6a0-42fa-5bd4-9b18-9cb7cdb9a282",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f27614-4137-5e39-b6b2-9b8a69b966f4",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66d956c-aaf0-5f7e-acfe-af1ecca9c0e6",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4dbcb04-c541-50b0-bba5-b80a8ca75956",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a43fffc-193d-5e4f-8f6b-b05af83ca26d",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3b77c6a-ed5c-5374-8232-c69043b04931",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f45af5f-e40a-5ef8-8529-8e36574d0c93",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bb7241a-6478-515b-b548-ddec11ef4ed7",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ba67d27-a515-5d04-9d69-b0e90b7770f7",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45e544bd-437b-514c-ba13-2656938fea7c",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85517078-5c17-5859-9e11-fa17e906e6dd",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cf57835-2178-5657-9c1a-51c82b4b0902",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a083ff0-6c04-5925-8531-5e414478ea85",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75f85f9e-992c-5482-882d-0f50a33f0265",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2996d836-4828-5d9b-81b2-7afafcdf7326",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e641c02e-a115-5e1d-ae21-5d6d2cbfa6cd",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1d16b4f-2895-5c40-99ce-ba119ff0a6eb",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0652d30-a62c-562f-92ad-fb799170672f",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7c92092-08a6-50d2-a3b9-022d5c581fdb",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:535fa4f6-4a52-5a6c-86d0-8afc79c1e4b3",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09936981-2bd9-595c-a746-1cac73b798b1",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a2ca20-0697-56ba-b6d9-e3562cef0ced",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2205561-ab24-53b4-a715-1b9e6cfbd638",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d10c686-426b-5644-a09f-cf7376499baa",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfd52411-171e-5120-9e0a-a71c2a453b61",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81742109-b7f1-5271-a474-f020500d289a",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b54b21d4-e2fb-5a1c-8e0e-340cd62e796b",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fc2328a-3eaf-59ac-b542-76293669d1c7",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.8"
    }
  ]
}