{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:88d158b8-06ea-5ad6-8548-6de6029769bf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-zip-commons",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9369d24a-8f4f-5cfb-96e2-31f242856564",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb29478-4164-53cc-91d2-921ae4197e68",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3e16d87-4178-5d1c-af0e-7723a465306c",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1238076-34fa-5c05-b26d-a1c757c14fbf",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f19c3f-9247-5ba2-b4db-26bdef6eae6d",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:498e5b24-7eca-579e-b952-80f1457c3230",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f737825-a1c2-56c0-81bb-e2fc99077d2a",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ffa9557-9c39-54ff-973e-a563654b967d",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffcd096b-16a2-579e-b211-c3f6ac7292aa",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30cf48d6-704a-5d23-ac01-e8d42de5b06b",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ec274f8-28f7-599a-ba48-15cef3a4314e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:044808e2-a095-5431-bce1-36d1432ae22c",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2459bff8-b341-553f-827d-9975eb5f1c2c",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec9dfd8-e3d0-5342-8905-464b8120994c",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb5e200a-8131-5507-b0d7-0efb24bdc191",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77ec68b2-a0f8-5fe0-b45f-38ec4ed5e2a8",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76e4ab1a-ac4b-57f5-bf83-07ac67f94859",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54a4eeef-bca6-5319-9b90-a2c2c1810acb",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:275831fb-51df-5f50-ab82-baa84436c2bf",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a80c3ee-9324-5184-81d3-5482ac316b14",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a5b29b2-d61c-5b90-9c7f-edd252800f2f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:127c1232-3564-5b63-ac6a-77132c201b49",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e17525-32d4-5ba5-8aa7-dc69429be9b3",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e9a6fe-fdba-5be1-b33b-614bc0e455b8",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d55f5a52-0303-506b-b109-8d686d2021ab",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9adb33f-136a-5414-b8eb-00f376b90388",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087537b0-2de5-570b-b873-87a231e5cba4",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f68897f2-c4f0-5348-90ac-a35edfcb0489",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d491f1-87a3-50c5-ad92-9a0fd4eec589",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c576d2f-fd17-5578-96b9-50422bcae4a0",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edaffc79-ae2a-5750-ad6b-94425700f02b",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3df1536-4b4a-5ce5-a412-7dcf051a215a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64cbb4ad-bbb9-53e7-b5c5-5f590eadbc45",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9701f7df-7ad2-5cd2-b8f6-8476195627dd",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a701432-e825-587e-b654-d7437ccf0a8f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d808f7b-8548-5001-998a-3983323ed36d",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9feb453f-d203-5ca4-a96c-3604cd30b480",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6da4c937-fea5-5c8f-a040-6ca947b22389",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c121b58c-f4c9-5263-b87f-69425508d424",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:303339c6-54a8-54fe-bf4e-c850cc17eacd",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43a77ddd-6178-5905-a429-c757ee35390b",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:886d528a-3a61-5cc9-adfb-23e515d8ed12",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11403202-ad73-530a-ba76-259746823242",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c681a916-fe6f-5be2-9ce2-9dfb3c9b351f",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afa6ece1-7c48-56a5-9011-395f12f53369",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d06e851-874e-52b6-a8a2-d7270b953c56",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41f3b23f-403a-505e-b6f9-5b160253b703",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:519591c0-1acf-5c18-9359-c65b03051199",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc3e3f6c-5823-587c-ad09-5234a15e0df1",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-parser-zip-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.4-tuxcare.9"
    }
  ]
}