{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b9851ba6-3878-5bfe-9d4f-6890958f3d91",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-client",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:27390baa-77db-502b-b2b6-156cdb3608ee",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eb0ed03-16be-57f4-bfa2-41d5b070bc35",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1050e9c3-8f49-525a-88fd-79f7c2dbad31",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee757330-09e7-51de-af94-785d0e37e33a",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03fac2cf-b96d-57d6-b292-046e4cb7c5d7",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2195e96f-0eb5-50a5-a538-46a5164e287c",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873d15f3-d3e2-51fc-9bc7-d600dc68c792",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ca3217-cada-5746-a894-8708a495ada7",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6524b2e7-9616-546e-ae25-ab6c743e0d6c",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7f57f0-6c18-51e4-b938-e100f23955e6",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e021baf2-ec6e-56c9-9d56-1a07275840dc",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b4c76c-b7e3-56be-a53a-583ed978a2cb",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20355626-36fe-59d2-a774-44334b47b493",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d77dac1f-2eec-548b-b5c1-c8a5051d36db",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cef6593-dad5-5744-b426-0c224892b32f",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbea6017-2aee-5d20-a392-0949d766dd09",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf9942a-003a-5705-8a49-747dd7510f63",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:092bc973-798a-5f2c-9e88-cc01b9e1e032",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc185fd5-676e-54ac-b927-642ae4e87f26",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03273d5b-d730-582e-bc98-18d3dff42a7a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcc18fd2-70ac-5687-9940-35081bd94df9",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5bca55c-5f05-59b2-bbdd-976222efe987",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32e9c4d-36cb-5479-9cdd-386874fe2ab8",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:475f5eef-a9ed-5251-b8ad-b190a5d9ca9f",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd94cfeb-2d02-523f-aff3-4c76955d3892",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:978fd1d5-4531-5e8b-8839-b4202c7c1ff4",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efdcee64-4212-58f4-808b-1ad94d7a33e9",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a91f383-1045-5630-b4eb-d8b094deeb49",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aff755fe-a905-5a75-8ac0-4a2010842872",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42a25e19-10b2-585b-8e4c-d183ee61fab2",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5bbd415-8368-53ef-8090-5537430ac3b0",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68a88507-6c53-5bab-b1fb-301ad16bff90",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b920a97-d18d-5ac1-b5ac-6b6760e34fc3",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f372eeb-b882-5eb4-8c0e-80ad8d2b208d",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd772de2-7793-5a8b-ab91-1bd5ae68dbea",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c775093-6acd-5a2a-8a68-a95c2cba0d76",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cc9cca3-b115-5d40-865e-5f3674eb8eaf",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34350e5a-f266-5f76-a6e4-a21048e69276",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55bb36cf-d213-5591-8c48-2e7453ef488a",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e31c8a65-36eb-5432-883b-1572c79a213b",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:222770d0-2205-566c-8434-d5ab7280a6d6",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1dc6810-7fb8-5b42-8fa3-466f14430a37",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a529aebc-2024-58cf-aa5d-2ce1843c368a",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60ffed19-6144-5cae-a17c-2bbe07b4fd84",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4799c799-834d-5eb9-8f52-df9f802aa1bc",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bab33e1c-e64c-5490-bbf9-9fb9826dfa5a",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14e1c0d2-f02e-580f-b82e-d2f0867f5bc4",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc6c0c4a-23b7-52ae-b9f0-44aaccd16a61",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43c2bc53-24af-57e1-9d3e-12d2ea479ccb",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-client@2.9.4-tuxcare.9"
    }
  ]
}