{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ce05531e-a9b2-57f1-83f4-96dffb300d09",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-xml-module",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1506d810-97d0-5849-b133-dc694829029a",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:655a8fe0-0694-5fe5-9228-02718a7d045e",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afc5368d-1389-545e-ba96-d11ff8d6b636",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4df76ecc-3b8d-5f0a-a88d-f307f267886b",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1608b7d-3949-5c74-83bf-bbb88a9514f0",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba6b9d3d-5278-55d2-a766-12b61c242ea2",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b6a113-c74d-5f3c-aaeb-86194ef97846",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6941ca5d-59f0-5597-a8c0-e06daf8feb88",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1eef649-0b20-5c61-abe2-08c815341035",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c80647da-1301-5b61-855c-65a308b7d265",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e17678a-7081-594d-9620-d2a93ba46080",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:110c3936-7d22-5280-926c-848d1d975bcb",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7eaa2a0-dca6-5ffe-addd-15106a08b63a",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf613e9e-43da-5e8e-90b2-81745a892b9f",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a7ffa7f-2465-54ff-879b-115f3f2b101d",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4dfcef2-4763-59dc-a05f-245ab03dcfd8",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b1558ca-cb7d-5848-8ef3-e22d2f894a0b",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a838137a-13d6-5e90-b7ce-c73e5249d7a4",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffa5fb41-f1cc-52fc-b39c-61ef5903f729",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c328bb-d3a4-5b8a-8e64-ff1ba98b4486",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eebaa810-bef1-56c5-a1f5-052bec6cc97c",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b3ab274-f025-5eb3-abf7-7500e4479574",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2506001-6c7c-5021-b38c-e59c7079fa13",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba94506d-cce1-5bde-905f-b27a7fbd803e",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:240c4c01-a64a-5242-b9ba-16565fd0fe11",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:977339ee-b327-5957-b4d2-752fae615259",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ab6e8fd-3a49-518d-a633-fc2e32e05a3d",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fa87b69-49d3-500c-896a-349e408aad8b",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b451e611-08b9-5a8e-a8a8-4ab9f909f6b4",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72ec3fa3-c0fd-5a57-885a-1a6c81b5c762",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4da62d04-2815-58c4-aa2e-d02ff14b3445",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c14479-32ac-5d89-8599-b9a5641fc20f",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70bb18ae-7984-59d0-91fc-90337e26832c",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1405c702-6d5c-57a5-9d61-441372c0b1bd",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7da24d9-0351-5670-a4a1-78e5005658d9",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bae0919f-7c74-56c2-b664-ba3b73ff42a1",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c347d05-2bc0-5c6e-b970-0f338e90eb16",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b0231b3-6a84-5d64-a9c8-7300ad7a5e3d",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0265758-a345-5e53-abd2-b8da88f2c444",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00cf16e4-897e-564b-bb2e-dce89d485b55",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd2d533-63fb-59da-b100-4c40fd5ebf7a",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:764cead1-8b4c-5bda-b5c9-3bf8162d33b8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20645f7b-ea1a-54ff-9dff-a8461abf3113",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa0de92c-8522-524b-8b09-b647ba7784e1",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d38056e6-c5d4-573f-a130-21de7e3e0311",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7a2242-9991-52fa-a118-db4b94f8941a",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9775ec7-d2cc-5cbc-9f6e-c01064223aea",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:638c1ec1-0334-5115-be31-2ef793592242",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0da3b0eb-f2fe-5317-9155-8afa3618d507",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.8"
    }
  ]
}