{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:be6edbd7-f9f1-52b6-aa61-db20e4685d44",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-zip-commons",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:327e6300-a726-5095-a919-1e2914861ada",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:402bb9d9-1ee1-5901-b067-3041e6b4affb",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53fe27d7-d511-584a-b296-83e09376acd8",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755922d1-a82e-57e5-83cd-9cab4e848aea",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5379c5b-08a9-5b5b-953e-0043fd161906",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69579289-a5c7-5810-a927-c1c26aebd218",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b86571f8-02df-5acc-a4bb-33bfc2753d0c",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5d0cba0-6a4c-5b06-a31c-2fc9a8937799",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61d77910-c2a5-5885-adf2-de5aeb89b531",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94303b21-37ea-5b3a-9dac-5186d9879d6e",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:987f16c9-e64a-5bb7-8aa2-b86b64fe6561",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c8a13a2-9932-545a-8253-3ffadd370b1b",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe066018-06b5-5a1f-9981-87be21b83116",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36e974de-d976-5767-9e76-a1ebd522718e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68fa2dcb-f963-528c-894b-79cfa5747131",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a454b21-aa88-5bf4-bf05-3b34a2cc32f1",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aed63223-7947-5003-ad62-63108aaa2027",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65bd19da-1e78-55e8-a336-ae71742f0d6a",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:902b3f67-800c-53b1-a5de-81857ff25526",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70e9ad0b-6d81-53d8-8421-b96d82f2b36b",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50272765-72a4-5b6e-8b16-ca1917f1c217",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da3ea08f-aee6-5ae4-91c1-be43d543ea0a",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a773dc2-b8bd-57ca-af5d-71b04d8b9e25",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2559025-2560-5fd5-8a25-5924dec99ee1",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f6e3b9c-d39d-576c-8241-c926a32ac123",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7191e297-e289-569c-abda-55dbd9d77203",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13067493-6b2e-54cb-bb25-bba6e5c27ac2",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22be61a0-ed61-5292-9926-3185cf5aaa03",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c99bb998-f3a5-56fc-8107-9805a7367f1a",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23a479a4-b942-5a2f-9e8e-c7c025bd620f",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa4510c2-809d-5114-84c0-e66f6931dd82",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40666225-a3da-55ab-ab6e-50caff306947",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05b7b3b-7376-54e1-a6d8-aae3815ac9fa",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6eba9f-b8fc-55e7-b96b-c29f58650f67",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b371adc6-a196-5d6e-957f-5ce2ba10f325",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4deaec0c-7a5a-57c4-89a3-967da079b2e0",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ede402-2e14-5f9b-935f-b0ccf3281200",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6d4563c-75ea-5dec-939e-8c026fd5b9d2",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76e688a1-77ff-5771-8830-78670793fb67",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f20264ad-d926-58f0-99fe-881a58a5c2da",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba00dfa0-7216-53b1-bb3d-89d74dff467d",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda30236-d3ea-5d75-a6fd-19e5121b7318",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aed1c68-9911-5b6c-bf26-298545773cf8",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c8a93db-b8de-50a9-84cf-6d512a85721e",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd195e54-7876-57a4-9680-e02105bd66ca",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49ae4145-bc58-5981-ac92-a94ad54f3b25",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca39877a-211f-55a4-a906-64a59b13cc32",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69e3b1c1-c7cc-55dd-8500-7f5678f08965",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cfab477-068c-562c-9411-b4cb07939d4a",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.8"
    }
  ]
}