{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:03d6f3fd-9e34-5218-86b1-32e028b2c595",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-pipes",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1be3c620-fd03-52b5-8a03-be72d3d5e7bd",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e4dab0-a489-51ba-86dd-69df1d54b31a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9f91920-1018-5c42-9038-c41ddc4a6501",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2930627e-849c-5fe8-a806-af271395d497",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e369cda-1b70-505e-bd93-1e982e1e9595",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e15e68ff-15b6-50ef-8050-7704cdecf538",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d9b91b7-6de8-5304-9d06-f0e235bfab65",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a67c243-0f71-5768-8795-85cad5cf0f5f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b57765c-4d9e-5a12-9922-9fd5191f19f8",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:549ad542-34c9-5b41-a7a6-043dabcaba3c",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4c332ca-cf83-597b-a1f1-acc651a121bf",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a807f40-0dd3-53ee-9b26-5d17d266e4d7",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c037bf00-c0b7-5fd9-bfaa-9342dfc953db",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e184ab05-e8b8-500f-abbf-7aadf996de86",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19fc172c-c215-5280-b011-0f986cf4d1f8",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba963099-e150-557b-8312-c62102fa0c6a",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:071e4daf-9f99-57ae-9f64-981198e6a937",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dfc3189-a57d-5013-ac5b-146c6d7def1c",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ef7f1d7-dce3-5310-86ef-5a896b0f0b8f",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e547ede-297d-543f-9102-84075ca53306",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78e34748-a916-58b5-85a2-88a69ecc29e3",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb3a89d3-d740-5bd0-aa57-b197d1c94c86",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bcfbefb-6625-5f03-b20b-35b5af899c09",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3691c36d-10f3-5df4-b89f-f162ac2be84f",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db021150-a7ee-5b42-803a-5f081f98b816",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:320c0559-0eb7-529d-a400-5020805ba43c",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfc377f9-ea6e-544e-9038-df0f3faf4317",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc15f7d3-5fc6-5a45-97bd-d7e872bf81d6",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:760d8e25-78a0-51f7-afb4-086cba284b71",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d96b8ac-7791-5964-b5c6-c36cac4638a9",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf96483-3f50-58e0-8829-6b3b076b150c",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b211beef-dcca-5a3e-b59c-a399873f9156",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc524a11-d0e8-5c53-86bd-7e1dfc38eca6",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:882eef09-8c1e-5114-bfd5-61fc575b1bfa",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b98b63c-9596-51d9-b642-0b0211037ff5",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f527b005-6393-554d-a650-1ebe899a40a2",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1115ed3-7cb0-5b71-bbfa-2540a49a5ba9",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d85bd4-ce1b-5a0f-b5d5-ba06fbfc5865",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2ee6d3-b3a1-5a20-ada7-8192498fb515",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afd73956-7f05-5ad6-a5db-5199408320dd",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61c852a3-deeb-5401-a813-9e68bdb3fcd5",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:513af556-ec51-56f8-87d9-69eedc01bfe4",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec276608-05c8-5ce4-a4c6-347130fcfd59",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:786e0ae4-96a8-50a0-ada4-0de08afba5e7",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad356156-c225-560f-8d63-9f44d59fcac8",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98eb9902-fc69-57f1-a862-b32bf1f86505",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c19a76ef-9892-5d1d-a6b0-50e2c0eba00d",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8449a04-6ce7-5e34-8fc6-8350a514c8c7",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027a20b0-a461-54f6-b829-6f679ecf8611",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.8"
    }
  ]
}