{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:07edf649-65ec-5d63-b68c-45def1b9fa0d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-core",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:530c9d76-8f7a-5b16-90d9-262d483ffcdd",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bbe34be-3b99-5700-8452-2061c64fe7b3",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ed8db36-bebc-5cae-ba09-e7ee46ff97e9",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af698200-097c-5ccc-a534-f2e21c3098c2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0c7ddc7-406b-5dae-93f1-0be5dd0405be",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc9e3c24-5ad5-543d-ba64-eca0372b36ff",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2314efdb-bac1-5771-95b6-daf5aa5e00b6",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7e3f262-6d0c-5a98-976b-48e38e293599",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbe95ab0-cf1b-56c8-b737-304e8a1d94ed",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c550a3-95bf-5c0b-95b5-b4b3e607c6ec",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c9c3aff-6364-52aa-b145-4603f71592b9",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3507f7a4-2e3d-545a-affb-8d964a6db241",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a08f64a-4e1c-5a63-87cb-09394c14054e",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6249b5f4-bac2-5403-8e9c-8f833a801719",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c7ccfd-51fe-580d-932c-39a31e365fc4",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77e2a7bd-dbdd-5909-8df2-0a800e1e6abf",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99d7a394-696d-5c81-9b8c-8196c5f86cf8",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3419cb0-932c-5d82-88e9-c73c9f7a611d",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5e706a4-c6dc-51e6-97d7-19e8309741b5",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bb3e8be-b00d-51fd-9a26-83cbeb515c1c",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:896aca10-63d4-5bee-9de4-dae8eb40d9f4",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:688b7963-014d-5284-babe-7d0aca020d85",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5f288ca-cdc5-5756-9b33-943e45aacc60",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c77cb81f-5695-5b68-9127-172c7cf6abd4",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c296429-b7e6-539e-8222-7d2dd4f0f08a",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b0c3f71-d387-52ac-9065-9a8e63f5d112",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dfc2497-d228-51d0-a4f0-446044cb1cc2",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:166d221b-7512-5dcf-86d4-78178e6f7fce",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4084ce49-dbcf-589f-831a-91d1332b5ccb",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938925a1-f5b0-5cb8-b3f3-abd0474faf72",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d27fa0-3308-531d-929e-4ce0e54cea99",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2392492b-f561-5ea7-8cc2-38090b54ed0f",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27787288-0d20-52f4-b02b-59a1cae77ea1",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f59b6650-becd-53f4-99b2-af2f67f2290a",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63522ec2-5d15-5d83-8b22-ae681302bc76",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cb1fc3e-c42f-5667-b9de-6107a7652607",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dccd50a-020c-532b-ad1c-f2a6d2a7bed6",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a64d0106-1ef7-5036-8d86-b9bbea796d00",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d09241f0-bbbd-5a02-b3ab-b89f17c52aa6",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a82c7cc-98f2-553c-aa1b-6624024707fe",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b48c59ed-96dd-5cea-9782-0143b8b69d26",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c80203-8e4a-5943-9a2d-ad4dc06b55c2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32e92fa7-a1df-5592-9bb5-276461ff5a4c",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0e2e8e4-61c1-5230-9575-34cefa0f7935",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c8f91c-c91d-5fda-9e1d-b8207aa724b6",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18637315-86d6-5d95-966d-c84d455866d7",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2602c8c-9b8c-5bd5-a034-3bae2dfe2dde",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baa9357a-1f0b-54cd-953f-db4fc249411c",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bffd44e-d35f-5eb6-bc62-7686d6d54461",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.8"
    }
  ]
}