{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ac954bf-7cb6-583f-89aa-d6bbbf90143f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-client",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cb9a184f-a15c-5a84-8104-edea9b924666",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd6a662-e7bc-5c45-8130-544b536a379c",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d29f25b-3b15-5079-aa0e-95d4a9ddb52c",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc419bb3-02b5-58d9-9834-c10038ade95f",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e56f801-4719-5486-9af4-6d2aeebc9d98",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6869598b-a82f-5104-8612-2eff50f1354b",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cfaf789-7908-548d-9422-47b7cfad1361",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d246af80-c961-5b7d-8ffb-fa21cc2b8e69",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bacc4ae-9873-5bae-813d-cc39f35c579c",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:321ede19-3276-5028-bd90-6eb35b8d1b67",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c52a5ea3-6940-5e26-a2e5-038eca7c338f",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46800653-4ee0-5c7a-8db9-d509b5ff9cdc",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d21041fd-9a49-515b-9e4a-965da8f55479",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9df8d61-1d95-57c8-8d7c-f05f6f25899e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:667dc375-9db3-5b56-9422-4f10cf8fad59",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf17ed76-cbac-5b19-a6c0-3a04734e7efc",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34d76bd-6dd0-5b7d-8b46-1f86e15c4aad",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efca58b4-6ee9-5d28-8622-d600e2a1aaeb",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15e8dd07-5e97-5a99-8097-5156d12e6271",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f11b0d3d-bdbc-5aec-9556-3898137d1e82",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a510654-5d12-5ab8-9023-aa9e5f613d12",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:533f0da3-6edc-5f10-9664-c4a6e6f64402",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e47962c-34d9-52f8-a9ee-c683f22906a3",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fd6c60e-957e-5e00-837e-5e5e0ae761a2",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1191240b-a4ce-5532-8d48-7919b5f31498",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11e82612-62a8-58d0-8a02-8442dfcb8fef",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d733cfc-dac0-5cc2-9a2f-1a14454a27df",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7969985-c6b0-5f9c-8cab-7e20237a522a",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1b53be4-4c13-55e0-a98f-0dd3c8eec676",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a841516d-4610-53a5-a14e-37e9f356f0e1",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b03c180b-a0c6-5ee1-a6cd-e85b56b8b3ef",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:579ffcf5-527c-5a4d-9f4c-4ab6c8e16c2a",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:008efd3f-4208-56e9-aa66-8b054884910c",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e114470-3dc6-52ab-af3a-40001ca60923",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25336f5e-b0bd-514e-867c-e2b191a10a3b",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7de19ad-9a00-5c2d-9b3c-c62df3596d9f",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf0c018-e13c-5c5c-8f29-86ac60c08e57",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3041ec2-a568-5155-a808-3595fbb66be8",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb32c2e1-e4c8-5dde-863c-5c1a9e38fd0e",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f372482b-db1e-56c1-8590-8cb6b422c3c6",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17277c31-667a-5e22-b1a2-f666b6050d4e",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968f2fad-9f35-5fdc-8af6-a6c63750d815",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4be9da08-4976-5395-9164-6b049a7251b1",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aebfc9a-d134-57f7-9fd6-d9995d7e3563",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b771a4b3-9c35-542b-ac15-1debbfed5a3e",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7beacea-2013-5af7-ab5c-5eb6022a26aa",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89d4f9bc-4bef-5b67-9e38-a3e2b3bd0d49",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85d5add6-3ba9-5500-a6d7-de520b5f0c02",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06bba466-0270-5c3d-a41b-4e2a6f18dd4b",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.8"
    }
  ]
}