{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ad632c2e-fbc6-5532-a047-9478998b8943",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-pipes",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ee49eac3-6d68-521f-8afb-116d3089b973",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:560584a2-e88d-5ffd-932b-e39e0a3f5401",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6170f43-87e1-5c27-86c9-27cde5bdd1b2",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5c841e0-be8f-51f2-9b20-d76d63adb137",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f017a1d-c5b8-5124-9fb5-f3fac2780e46",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:837eed25-42d4-5750-a5f1-e47be0789895",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8413b59-5368-5884-a524-c405249a8e57",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1de369-ecd2-526c-a9cb-bd7d0ca2a7b6",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2df7c7d-1027-5e4b-b2fd-d26b53161649",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7082be80-3778-572c-aa73-3c0f617431d2",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35fa0303-85a1-50c9-a0cb-1f052bdc9d94",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:084bf48f-5703-5923-84d5-9f689817a11a",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b60202e-474a-5a87-9f19-d0c58db9f199",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c801968d-c8ca-525f-9f9b-eaa2fe9ab3a8",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:706f0a74-5032-5886-ad80-0cd615cf154c",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33282d0c-b7af-547f-87ac-b97552e860d9",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b6252ff-de47-5c4b-9747-3521f2386f9a",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92140d50-5316-5baa-802e-9ba1c9e78584",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68b33355-fade-5d6a-9c4f-785d1c7d86d0",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1de2f5ac-8b89-5934-8fb6-235e0c50836d",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151501e7-ec6c-56f0-8687-6a981c1cda2e",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b27b0d68-3997-5ec8-a836-dd6b4b91fda8",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c987882-32e5-5b4e-b74b-ef2ccafc6431",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa2eb267-1879-51f2-8991-367c45868898",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a8ddcdb-fdd5-58e1-bd2e-aa03e6220f03",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e41722cf-c617-5bd9-9832-046d405ccdc9",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14e6fe8e-433c-59d3-a431-31134d87a736",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2f7a88-a1f5-51ac-84e7-eb8cc0a83b64",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ae1a39-5c85-5cd3-83e2-30a720fdb17c",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8956e82-b74f-5a98-b12f-b0285c89102c",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9360c344-d5f7-5888-aa0e-dcae99f1f2d3",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:432da6a7-aebb-5a99-95ab-b0b8bc29f3bc",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d19e4089-01dc-5adb-af17-f8c3217b903c",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51acae36-f37b-5288-b880-e53648778696",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049fb5cd-a60b-5903-a2db-1f077dbe146c",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bae3023-a651-5eb9-aacd-6d4a40609e53",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e464a246-de21-5508-9007-518ca16703e5",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9f01e8-e53b-5b66-b0eb-e4853c3a64a9",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dff61896-1f0c-5d68-9d28-b11fad725503",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d57d8f6-7686-5f6c-a94e-f1fc6f800262",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd2b7bff-e7d6-5dc7-8741-b58e9a0b183c",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:352c8fa4-8529-5b0b-a0f2-a08616f23efb",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a7fb5e-0c23-536f-b663-08efeadec022",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7222bd7e-8fb1-5377-be26-a9f92f7b3469",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c784236f-a27b-5a58-b169-5fc7d1d0b64b",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7952ccf3-ce59-5bdf-b9a1-872be4578d90",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f53efb3d-7ce7-5c70-902d-d6d0342df7da",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d74679-c875-5dc2-8caa-aff25c6116ed",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ba04018-6f47-503d-ade5-51af5d4775a8",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-pipes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-pipes@2.9.4-tuxcare.9"
    }
  ]
}