{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c1b78686-7eb1-513c-93d7-5db60663d496",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-pipes-opensearch-integration-tests",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ab2c817f-2b35-563c-a27b-90ff72cb17cd",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58be7ec8-8c52-5be8-b91b-6cc172dfa607",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cd414e2-04a8-57ee-84e9-71b262ee0a01",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32121db7-0cc9-52bc-8d39-bcf366ca248d",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef34eb0b-94a8-59e6-8d85-b1855ddbaf4e",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da821298-ed5a-5b1a-8a9f-e28d88272606",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30a4f73c-f0a4-52ea-a5c5-5c17543358a0",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa1f736f-f74a-52fc-9985-775e737ecce2",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7161f77b-0de0-591f-8068-f3a071cb2ae1",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97b6cb36-fbb6-53c3-aedf-320afba9a7ad",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9057cc05-e22e-56ed-ab69-b9129a88c5a8",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26574252-2235-5aa2-872b-12d565159537",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff60793b-54cb-5dbe-ba78-2cb7c7a118a0",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1719575-5f37-50f5-91a1-5c416a408011",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69459a1f-3833-5cd4-8a5f-54aefe473dd6",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:596df041-6bf9-53fd-b097-223b9e516aa9",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3c25668-474a-572c-a933-c629a4b0c9be",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bedb1e6-786f-5fa7-8b31-5d14e9ee8a36",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:454506c4-84af-52c6-ba58-05810bf57c51",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40fd820d-7694-5976-bd2f-b0da7035ec7e",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144ec1ba-53bf-51a5-b72a-73199f184d6e",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c33481e4-53d1-5c74-a161-97c940b5cf9c",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:858a59c8-a344-56b5-86d8-13c2a8a4d6c3",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74d37ec2-98b1-5687-a431-0ae5778287ad",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6378dae9-e05b-59e1-a2e5-43ace15bc436",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:838b864e-1f0d-55c8-86ff-d1119d1bfebf",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5adefbc9-528c-5b9c-b1cb-e2dfe8e5541e",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07f4a51a-3ad8-5491-b608-206694b25a61",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:685ef4d6-ba3a-5e99-8def-48d17b647be7",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4623685d-ea32-5aee-9b72-e50c09b5d8f5",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f1bcdc8-f645-5903-bd43-6a8e10ae7d00",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bb83820-49dd-5a98-bc1b-3901d4915b6c",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:664d359d-81d3-5849-a503-7ddea88728cc",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f53c457-cb32-5ab3-9522-bba970b05c4c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8a34501-7e84-5fb2-bed3-c806a649849d",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f02a184-5a2f-5956-82fd-cd4f01684d15",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e46a2ac1-0681-5aa3-9564-84054982d414",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f726bff-e709-5886-a1f2-920f909157b5",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a687958a-b304-52d1-bde0-e4a2b85c9c8f",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e05ca3-f2a5-54b1-b6a1-e55e88a0ca51",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4936e030-b90a-52cd-b6df-999d2c5a8f27",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a477860-025e-5987-99fb-8a25b1f5e361",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:056d23fb-f9fe-5c12-a23e-1a765c3eb9a4",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc07e875-311d-589a-88ad-9c52abb0a01b",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def0f73e-7078-5189-92ce-49efd6c39079",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1cc0059-058a-500b-b201-392ba14b1625",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8069e457-83b8-565b-81d5-a254158baa32",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1802cc88-1310-523e-89c4-deae4fa869c9",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d97aa03-40bb-507a-8882-0df00306250c",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes-opensearch-integration-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-pipes-opensearch-integration-tests@2.9.4-tuxcare.9"
    }
  ]
}