{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:082983be-bd5f-534f-9ed0-15da3381bf4e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-scientific-package",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b64b8024-7cd6-5664-bb2f-daeeb98c0c42",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82f896f3-533f-5f72-bc60-80b49ab0a529",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be406907-c7b0-550b-9acf-3c95462639d0",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f99e09d9-6023-5ee4-8b4b-8ed241e3720d",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6432978b-18d4-5026-8cc1-c3b7e7fbd5b6",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fba1902d-d630-5eee-acbd-52ae8580c2a5",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d93274e4-138c-50f2-b864-c0d3c1b7ac53",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceca4882-cbc2-519b-afd2-30c597e16b95",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c9b0db0-ed58-5ae2-b243-e75a807a6da4",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964bf485-ecfe-5ac7-baea-6b1910a6f440",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0346fe6a-57ba-57d2-ad56-0bf73b460fb9",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca9a4a33-9b3f-5f71-ad46-0b01aa4954c9",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f04b4c3-6244-595f-a4be-be32c3a34bae",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3edeba9f-f94a-5483-87c7-6760531eb9bd",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65398dfe-9660-5a7f-864a-c41c209bf772",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe6ce87f-9ff5-54cc-8738-b86300514aa2",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5a1fc41-39e9-5710-ac98-e10a16ee195a",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:545b54a3-002c-532a-b111-1f5613e2c918",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72c6dde3-4068-541d-aa2d-e3c0549bef49",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a2bde46-0fcc-573e-af25-c6b85e149b77",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1ed8a9c-4410-5109-871d-686b81467130",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d4f86a5-55a8-51fb-8f9f-809b5e20d464",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f86e3716-1915-5c07-9b9a-2bb7e7a16352",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1469713-03a8-547d-a90e-6e6feb8b54da",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de3e31a4-9e30-5053-9c2a-32fd2715d377",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6ec3def-1a8d-51a8-a16b-6fefc97a6937",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36c1437b-f03c-54d7-89d9-43b45c4c1a79",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64536080-0dd4-5d1f-bc06-ce91eac39323",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc92a90e-e295-55f7-af0b-719771db0de4",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91f2618-e10d-5f49-a6af-9e4c9a146d0f",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e4bae89-0595-5bb7-9025-b2a08a43f99d",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916a9db9-cde6-5e04-ab5d-13adccd27cb3",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3ca6d5a-ee70-5c10-aee9-5287cec77cfa",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84f0b682-faf3-5a6b-82bb-f111e188465a",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef3206d0-8d19-5267-9fba-6d6f6ae3bb16",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73a9c4a7-b44c-5613-91dc-7a0ee27e98b7",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d1a6517-26dc-5e15-9f05-10e1afa01ea8",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57eba16b-9eb9-5879-89d8-0cf16bfca5aa",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbfd394b-9580-53e9-8849-748cbadd708b",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2143d27c-3529-561c-b85e-6e78a1238f7e",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fbf9733-3698-5579-b100-f35b23820b25",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961f8b71-6f80-53ab-8819-a1cfcc581342",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e0ba823-2edc-51eb-b555-9139cac58792",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eacd058a-44ba-5559-a5a5-6beee7267710",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05e4df2-bf91-545d-8885-c0ead2f9638c",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf2d79a0-bd87-549d-802f-400b5ce92cf5",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2b3c4bd-4afe-5b71-b7c2-6d3de3da6d1b",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79a81a74-8435-5a31-95c2-86e84f018bd0",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40479d53-c3c9-58ec-bd62-5849ff093a55",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.8"
    }
  ]
}