{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4630bc19-f583-5166-abfc-21af886076cf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-webarchive-module",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9e63c630-282c-5cb6-a7bb-e6661e7eb15f",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52b54d5b-a5a8-5c92-b8d1-370358005f96",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ccb05a-a8f2-5e83-bcd3-3cff52ef5c89",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d51d568-1c14-5d7b-afc6-8b456922e9d7",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:413b59f1-4af4-598d-a3f7-3481d5b2f3ce",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85ef307b-8be5-544c-a416-e0b4ec617bf2",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06e9cbb7-44f4-5a87-ac50-665651b5fcf1",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c9895e7-be84-5467-aeb6-d3caeae35461",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1f792ea-5a6c-58e1-9da5-cd9a3768f887",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11a265be-e57c-583c-a4f3-67a4f384e3a4",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eefc272-7e58-5013-a221-6a5406780ea0",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b17370e-a715-5287-88f0-bc469e360f91",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b08aca6-3513-5add-a9d2-25db57f52f4b",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76db580b-7181-56f9-9c64-7e81f5a6b0ad",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cd1cf2b-41ff-50ce-bdf6-03c98a4a6983",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14c68861-0288-5a01-8763-cec578c7484d",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13f7f089-5bc7-545c-b0a5-e0ec4c1f23d6",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82ef592f-6aaa-54a2-a825-43cc4e8da145",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd09998d-4822-50ae-b14a-d4cee99b718e",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a64ab0-d434-5c6c-a6a0-347245f3130c",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:864149e3-0ff1-5037-891a-1ae62140fec6",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57a07df6-03f2-5c14-889d-7e42cf9599a3",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14197fe9-0332-5519-a809-b8a279af4920",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e420ed2-526e-5b2c-b49a-a5d207ea2c18",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b84b964c-3a2c-52f7-b507-8ad2bcd613ab",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ae2b69d-25fa-517d-a98f-8c6ff69d286b",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d4ca60-ee7f-5db2-9f8c-14835fb278e2",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0db0ef9-9321-5a14-ab31-446375cf57cb",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3a62591-67e0-5e8d-82b0-8ae37ceaa14e",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eda75f6-64d0-5dd7-b545-1decadd5404b",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f187281-2bb1-59b8-9328-65f1037f0b51",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c34a7c13-380a-5169-b46b-79b48069623e",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa73ebd0-066c-54b1-afa1-b3329031c2e3",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7074043-d880-55d7-a85d-7239b5cf20a9",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afe8bf33-e6bd-56cf-94a0-1968f8a5c46f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3421934-6c54-5440-923a-58d5f3ba338c",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5720bdf7-4da0-5ce2-8e65-51d9c641c9b4",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72d7bb4a-874d-5def-bb3b-89eedefe6484",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12f56fac-0840-5fcf-9e2e-3074d87fc848",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfc1b45f-135a-50ba-a76b-ff3e3daccfb1",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f92dcc7-efef-5b24-8dee-2790851e9968",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:577255dd-8f89-5da6-aad9-7db15152322d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95328821-660a-584f-a50a-2081e10f158e",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0eec72a-1250-5d64-b6a2-71463680572f",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:563cfab5-d777-527f-ae15-452cbe394961",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae857726-6559-5275-b067-2cfa0a97db83",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:723e8f16-607d-5a42-be66-b115df48e244",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1209860e-da9b-5a19-bbd6-88baad6e9802",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:244cfd83-0324-542a-8ae7-b600962921d9",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-webarchive-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.4-tuxcare.8"
    }
  ]
}