{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bcb3ff02-ffee-5791-9d97-aacf4a004efb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-scientific-package",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b9dc50d2-f047-5801-89cd-db0b9e47c206",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84ec9e8-ead8-501f-8b18-b135633d7f4a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75663390-5246-507e-86f9-c4c542b2fb92",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4878d390-107e-5724-8353-5f9976ccd6f6",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79a34d3e-96b9-5dfc-9231-78fb3af39b34",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f9df2c-4924-5137-890d-2d13702ab1a6",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f25cf11e-933e-591e-9af4-1d57e1a094de",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be1194ae-e8ed-54f5-af1e-9b73807a9f79",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e355cb1a-0f17-584b-b454-cd59d2e76253",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a5cf49-63eb-5f89-aa7d-8e60e8765dda",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3358b0d2-edcc-56ef-93e3-315f85db77b2",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8a1902a-6432-581b-83ad-83e352311a37",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b78aea25-eeb4-5975-b9c1-4839a54b92d2",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27136993-5ee6-5851-8b0f-6b77d546eaf8",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1170554-6a1a-5ef8-88d7-c2240aab9b05",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee5d0af3-1804-5e28-a562-a4d8140656de",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be5db0c9-dc48-5d09-98b1-0bb009cc3150",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:221e14c2-dd71-54db-89c4-3c76c89f3652",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1a6b89d-f2b6-53a0-a821-d2c5fefd701e",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edaa0508-89f7-58d0-9c6e-a16908603ddf",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40c37380-046d-5c54-925d-4836b10cb7fb",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58078919-74ba-5e54-b69e-0aacceb46d5f",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e071c92c-00ab-5941-b454-a57f10f77518",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aad38b73-94fd-5e0e-ba2a-dde57be5d8a4",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c3eea4a-496b-5245-9261-40993f9d34aa",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1c0617a-d337-5466-8b3b-e40dcd7b75d2",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8a768d6-b9df-538d-90a4-ad0a1d6cd545",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e662ac24-6c54-5b2a-87c0-bb5b52f5f59b",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85cd11a8-1b3a-5a35-a676-019f752775b4",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb5203d-44ba-54e8-a31a-043bd9ed731f",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faa8ac9d-51a6-5934-b45e-8c09e078084c",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f70f7d9-487f-53c5-85b4-e8c92cfebae8",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e982c537-40c8-533c-9c5b-43bb6b137bbf",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61859a55-5f7e-5e44-879b-14f15888d10f",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:864b316b-8263-56c6-a014-f0d66f0d7d6d",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9dd71a0-abef-562c-b5c9-1211403fd299",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef6221f7-ff74-52a5-abee-83b68dc1c01c",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d014d6c4-0976-5c33-bf9c-4677e0c44580",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6cde05-0e63-578c-ae5c-d4fceee473ce",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a36bb4a-6632-5c50-8e17-d64631ff17d9",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8309f249-e920-558b-acb2-375fe26726d6",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa017f27-9d53-545f-9d75-6f1fa937c4b6",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f8722b-1cf7-5301-b0d0-f2b25414f6ef",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed3009e-76dc-5e66-951c-11fa5bdafec2",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26a5c718-34b6-5ecc-9c20-6539c54250e3",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32a4cd2c-595f-59dd-83e0-41667f7c6655",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0605a249-26df-5bf6-8aa6-0fdaee943451",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14eb3689-2de2-5fcc-9806-1a2f242cc7f8",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3217031b-ac6d-5a4e-ba14-edabbe3d161d",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-scientific-package."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-scientific-package@2.9.4-tuxcare.9"
    }
  ]
}