{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:eba67f0a-66da-5e2f-b156-1af593b632fc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-xml-module",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6daa6d07-5c62-5e4b-a8f2-f9fe2bdb4d87",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b6dc888-c44f-5955-b0fc-c35c55db4069",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55802c43-d4c2-52b4-8a0d-7dd95e13a2f3",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e0b8e1a-2fed-5eed-82c4-a92e2f33cbb2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42388419-8a60-5abd-a6a5-8cdff834ea61",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:946cb17f-0558-5261-8add-2e06172aea56",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ae530c-56da-5923-bfab-c37da0406a44",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77e4d1c5-91d8-5559-a8ff-dc5fb275ad82",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:305be11d-8da7-56d8-84f8-dba54367c933",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fc72f2e-2dc3-5ce9-9ee0-93de40ff5847",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f33d181b-c4e4-5dcf-ac37-71c3ec5c7564",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47755597-d064-5d5d-bb4d-202aa29cc268",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fa36ba4-3ae3-5bcb-bcab-7967737599fb",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f98eceff-2824-5264-9fac-877d01e95bb6",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:828881f6-9fd5-5406-b200-61a24b3879de",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04a0054b-fe01-5507-b003-17e05bad44bc",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d09e9cb-2a49-5df6-ab34-e6b45930c7f2",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d24cb75d-5b44-5acf-9f0b-25934362749f",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:860860c9-bc1f-59b8-80c1-bee978cca545",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50485bb9-328c-5fdc-b3bf-9955f78c8822",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b59a047b-6857-5118-bf37-84c906065b9e",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc0ff579-3fd8-5ae2-803e-32f77a6578fc",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c046bc-074b-55dd-85cd-0d15855ccc9d",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f4e377d-72d0-504d-8000-14267bf0a4ce",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f74e638c-b7e3-54ff-97a1-304945368eec",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0bcf713-6621-5af3-bcfa-6cf2f410642b",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef5bb21a-dd1e-5b7f-bb41-78527c1d2777",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a95566-1358-5841-acdf-ca81d8793fec",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e0cefff-8f31-5601-a28c-a4f65f11f046",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98096ab5-b3be-5316-9f69-df9a45f508ac",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d43bde5-553f-5148-b02b-cc0628b6f052",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:604d39d5-4ce4-5027-8065-b3eda049ed6f",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dca5cb5e-29ae-5952-a21f-8ea6f8d25890",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3813144d-2ad1-52b1-bd6a-f4e74730ced4",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f987653-d2da-5084-b905-c64956364920",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88c1f000-0f96-52d7-8ce7-fa59c11c05e3",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dbfe918-33e7-5267-8a75-4b88f26858cc",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c6aee65-b18c-5a99-8eff-8bb13e11ceb9",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fec2b02-d162-5376-987f-b43c35ef7493",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3621bb8-7e41-54ed-a76b-cb00f3807396",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55423766-37e4-5545-abfe-c95251a15d73",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:690efda2-aa65-5a03-b540-ff44dd4a5081",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:255ceab2-9e7e-5bad-8144-7458b8ec7fbb",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d7e1aef-198a-5626-aa8f-7eacf8072f6a",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d11cf5ff-11c1-5021-99b0-e1d15be99539",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48c893a9-41ec-5660-bf98-21ee35c9703f",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6f54e6d-2b9d-5dd0-971b-0b6b8bd9ee0a",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b663232-b770-5669-b800-adcbc700c379",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ecaf7b9-87ec-50ab-8cdd-d79f54ac648d",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-xml-module."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.4-tuxcare.9"
    }
  ]
}