{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:00c061ba-e764-5643-98fe-97a3bb11b775",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-xmp-commons",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:26c2d1e6-147d-526b-a466-351b1539e498",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73326d82-d0ab-582f-848d-6f8f9d2b28cc",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b088716c-7a5e-5aff-ae05-050fe751f136",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0e5e448-30b3-5050-a80b-9dd647be5408",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a20130a-2074-5eca-b331-f5cef7cde8b6",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c224f7a-cdb6-5e88-8393-a55dd179804a",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b1512c9-9d5f-5895-8c82-453028df6a83",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28997843-03df-5500-924e-0fdef3b19bdc",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90ec6b28-0cb4-567e-8395-dbbd906a5752",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:223c8122-889d-5608-8d07-b8f36d004d0d",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef60da7-47ac-5204-a7ec-c9e2c03fe83a",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d79b4cc3-e9a9-5e66-884b-c98f1848747b",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5413e50d-6b40-5dfa-82b7-232e9cdae5da",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa44d21-c50f-5515-82ca-0357fce76cbe",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b231fce-e24d-54ad-a87a-643af631924f",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a7497ab-34cd-5124-9acb-66ab0a3cf556",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2e9edea-ef0a-5174-87a0-10e7b847217a",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:830ee8f8-9036-5640-9ba5-769efa7491d3",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09a482aa-a68d-524b-8434-e8e53c3d8444",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f510037d-5cfb-5a3d-bdb8-b75eff5687ea",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4990825-628e-5c56-af18-2fe1c14c24ee",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f87c0b7b-21ed-5aea-93f3-5664b8ae782b",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a6bc172-a474-564a-a795-f4b3218c5a07",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f38be11-8a0f-58ce-a5ff-f357c67edf59",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8fd77bb-b298-563c-b78b-143756d14545",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3af97e0-22a4-53c4-bfd7-fe859416d390",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2aeeb69-4468-5b39-8955-26f754beded5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b8d75f4-e6f0-532d-8883-c46e16371879",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:843c5461-80d3-5d88-82fd-d8465cd81559",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8302c18-7d99-5f89-9715-8047fbbcca99",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49b8524f-4917-5e92-a964-a8b62bd661a9",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7763dbb3-b74f-53b8-aa97-ec1d5b812dd7",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9ecf15-dafb-54ec-85dd-72bcefb6ba9a",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8c7c3a4-b2d0-5c4f-9621-3f2bd8d21b6c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05d7f77c-bcc0-528b-b4ff-3b30cc7e7b8a",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7828c672-f962-530b-b6e1-2ae124fe4bde",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d80ae47c-eb1a-5434-aebf-1f96da904959",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8c18ab2-8413-502d-bc14-1588d3f367b0",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6477389b-f66c-5dc2-9b32-26b9c44c2ee6",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6f2a34f-51ed-56af-9020-7b54e684a9e4",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2687b3a3-c856-53ea-9abf-6f56015ba43e",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e961ba0-48b0-55b3-a678-89e8251d2eaa",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fc5ad33-0644-5a45-8dac-006d8b3aed96",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cc8bde2-234a-5122-ab13-74b7e0d678fa",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c9a5801-9bb1-51f6-a377-918612ace336",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46283238-b70b-57c2-ba27-ee91290269c1",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:058ad873-495a-5759-b2db-462aa28ae3ce",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01887d06-994b-5957-8456-e012ece3aa58",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c032fc7-0bf5-5c3c-b3af-7f39043610eb",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.8"
    }
  ]
}