{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e4ddad6b-2dd3-563c-b0d1-fabf8305a78f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-ocr-module",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f46aef43-7f2d-5a08-aabe-0ae35f69206d",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b08f58a-da9e-5d66-8f75-14f452300afe",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f02282f8-3bba-5c6d-91e3-7e037227d28f",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:018a91ad-969c-5115-8c07-5f9412230f10",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca4df945-f116-558c-ab6f-5107b2c19aa5",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c364c583-975f-570d-af74-43267f46ce43",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62d393eb-767f-514d-9166-f731c724b2bc",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfd52a50-749c-5e2a-858f-eabf801c3302",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29e0cb5b-d827-5ef8-85a2-e850f87db7a2",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:106f3eb9-0e9c-5093-9200-86f44f37240a",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:685b0ff4-7639-5ec9-a5ef-6302da5166ad",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0516ace7-92f8-5a96-beaf-5d7f429f8943",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b3fd69d-f865-5cf1-b1cb-b8e3787ecbf4",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93beb4c4-96a3-55b2-8215-91cc42801f4d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7472327-9cb4-52cc-8010-80095eb8c36a",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec3f960-1993-5eb6-8a10-aa7de29c8dc4",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07439fe3-0f2a-5ef2-ac8a-61b1b86a01d4",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f64466f-2e1e-5aff-93c3-ce6cd250146d",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a332d63-3910-5c36-81e4-47b1e6424a31",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a062de2-38e1-518d-ac24-abeec12b593a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06d3ae93-5ace-5597-adbc-aecd8f7bd61a",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d2321e4-a2b2-5e8f-bcfd-a9bae55cb1c8",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39312be1-0de6-5e33-afd1-4f9db67af5d3",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddf868bf-584a-5a12-a1dc-bdff9c4df232",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5705bce9-7753-51f1-8c96-b46e57f43570",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc4fd787-255f-5dcb-97b6-174aee337eb6",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a08b80-dbeb-5554-9af9-a7a7404c73e5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c26a755-202a-5300-92ac-511504ea1864",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45660a9f-53a6-5156-ae3b-3bba4baf83c9",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96004f33-dbe8-524a-b50a-403b5855ae00",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144760d0-497c-5c17-bed0-f897ef60ca87",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eef3eca9-a1eb-5ea7-8087-29d0c3fcef6b",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e960787c-5543-5fcf-83b6-5536d39e86a6",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8f641c9-83e5-56e5-a09c-9bc635049619",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1ceb0d3-7509-5e31-bc4a-1bed6981e140",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33f75af-51ea-55c0-8c55-ea6ac784c743",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8706ee7f-f837-5f50-b063-8eedc3e8c6e8",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d07e484c-3db4-542a-98f4-0cde21fdff20",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a700112f-0c87-52a8-a92d-7b5b86caa138",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba88cc77-e377-5678-93b4-34c4f793a0ca",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fddede1-a727-5628-a991-7180f34cfe49",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a2a0224-18f9-5a75-b890-33b44b6e8c68",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f8a8f5c-4a86-5214-85ed-aa5cef74a600",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89c694a9-822c-578c-9c29-84fe77d970f9",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e72a2e-2ce5-53c7-ac9e-eabce4b26545",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dd93163-b50b-57ae-8801-0455e3a69daf",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77293857-4c13-54e4-8dcc-5d78e14b7a16",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0841d54e-39e1-569c-b8c8-b1bd5f272528",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39603659-19e3-5904-97ad-23316cadc304",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-ocr-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.4-tuxcare.9"
    }
  ]
}