{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3c888867-0d01-5d4d-92e4-68032b6793cf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-serialization",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b13f46be-3f03-5cef-89ab-23153506e0fb",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d53eeb8a-739d-5778-bbe7-aa3be802b50f",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c7cdc2-97b6-55de-9241-4b12b3e86ead",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c61a7744-3d09-562a-898a-45d31213ff5a",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e1a5cc-b88d-5634-bf4d-8bee75499f4e",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ccf0c37-1cba-5cdb-8fed-6801f98bed79",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd04c8db-4d6a-5961-b56e-09ea15580da9",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:904c29ed-c175-5ca0-87a9-5a3cc8fbdf6f",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b2e8eb-12b2-5ed8-b40b-50a7ebf8e4d0",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a31e9d3-eafb-524e-b9c5-1426f6b3a4ed",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cea5b137-7f21-5932-a85f-17cfa0e18f3a",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0542bb9a-d8bf-5e43-b229-14cae8c8aad8",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deca0224-856a-52e3-adda-1ea776f9af42",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aefff3c8-6c9e-59e8-8f0e-d48a8a84810a",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e0f4d6-bd55-585e-876e-06a963b8a5df",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16878a8a-eac2-5580-aded-847998dc1dd6",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb24a47-defa-54bf-a213-8523f5b8764f",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef4076bf-64aa-5eae-9cbd-da8660ddb5f9",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9394ea3a-9147-5518-a62e-0cdb989b4033",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf47ae5-4bce-5490-a1a0-011af0be83c8",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d715162b-d71d-55c0-b974-3346a8ec554c",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53067053-e048-5b56-99e1-9085ef5dd430",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a015f03-6ddc-5efc-ae59-cf9e584acfd1",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:565ce6d6-66f1-5df2-b992-ae3d7b5a9710",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d2e757-0a42-5cd0-b823-c1df3a2388ff",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9d0ced4-a93d-599d-b2b2-1939f45a67a9",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab75b796-2b2c-5c6c-961e-8b6e6b818860",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22463263-ab53-51a3-a379-d072a4046709",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5c79aca-e59d-5cce-8c30-60c39c07a438",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10f11776-f848-5b6c-b7f5-141fe619a252",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:774dd1a7-2b6e-5a58-a131-d472bff5a485",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9429e254-1f5b-577a-9273-6119d1e8d7e8",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8affd9db-29bb-5635-ab94-adad460a6d10",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1bec6e2-49df-5fef-9642-03fdab8d05f5",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bebdbc84-65b4-5b36-9938-92459e754219",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54954a4a-566c-5aac-b06d-3014ca86b1b6",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b068d0bc-1a4b-5cb5-b221-8f64863b92b9",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41923d8e-9492-5e68-89ab-224866a3bcb3",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2bb5657-7b01-5da0-bd78-c616a795373b",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c60493c7-0661-5c80-b8e1-66af6ae453f9",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2ca2391-1a4e-59b7-ac2d-0e1616ae638d",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2347f4dd-b581-5df1-8af7-b62c45640260",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e79cbb77-f5e6-57b3-a4eb-84fc86390069",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a5a7de0-a168-5360-bdb4-76fcc2085165",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:221efa81-6e71-550e-8804-7a3ea5e8e5d0",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f5eb383-25fd-5cdd-aea3-257b9e7cc488",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e588cea-ef7a-5643-89bf-4273b4d71ad4",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:866d7591-9536-5d81-aae8-6ad79ae68f2b",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c25ef05-a02f-56cb-ab1f-a525c42bad42",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-serialization."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-serialization@2.9.4-tuxcare.8"
    }
  ]
}