{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:856203bf-04d2-5c8e-9b2a-d2c78bc0f131",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-core",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:72a76171-4c97-59fa-a83c-e9cd16b016b7",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c203db8a-840a-5418-af11-3859e3a3cc7a",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a00c6037-3a4d-53e9-90c3-3dbf5111e2b2",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bb33002-ba95-5147-8bd5-791d6304ae4c",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9c516e9-77ad-5dc1-82cf-4acd06e38bb2",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3935a23b-a7d4-59a5-9126-00a033355c9c",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:561b8c68-95dd-5f40-a56c-6b6c8f754fa6",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac56fa33-5122-5e32-a5b7-c6695fbd0423",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f5c9858-8b9a-5c6b-8d2d-4f69322f83dc",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:324186ad-2299-583c-a1e1-698a1245b191",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afa66564-6d5e-53c7-8687-62161e6be113",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90ff9576-d291-58bf-ad85-26dc26fe6fb9",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:658619e8-2319-5f8f-bfb5-a42dccd1114b",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65579cdd-b421-507c-aa34-552d5d30ab03",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b283ab1f-646d-5c20-8e18-1001e0249dfe",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e40c80d4-885c-5d6c-a9cf-a9ef957826b7",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ab84d5e-7432-521d-b712-9dce1088a2c5",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c394b8e3-af82-5f2a-9a33-74a98af52294",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b54377a2-7866-58bd-990b-7f650c2c8e9f",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b445332-4774-5fea-afa3-542eec67f744",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5043fc4f-2124-50db-a036-50d26ab5541f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73017400-6fb6-537d-8b92-d689421a54e1",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:689ef7f4-55e3-57e0-b797-68e1ae54c79c",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcb92819-f369-537b-8a3b-b38bf6a11588",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93768c76-c2ea-56e0-97fb-2a99587b074f",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07b6e464-1e4f-527b-accf-a454aaea5c91",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd9a21d-5b62-5094-b938-1485517d9073",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8760caee-4ae8-57cf-8283-ea2d179b37ff",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d06bfe52-9fe0-5852-839c-e25801f45804",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2995d9d1-dcfc-5eb9-998f-c79619ccdcda",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eefa190d-5811-5e77-acd0-8bc45949aef9",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bee7c765-e100-53f8-878a-dfe6afd551a3",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f42366-6ef4-5eaa-8353-90f63b8f8d4a",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efeffc27-0ed1-5067-af4d-f021be74006c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb61273c-7edd-5101-88e8-afe314cbb51d",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1909559d-9ff4-5e77-b8d2-f190a667a89a",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11abc247-6d79-5d9b-8171-883472354cd3",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a74008e-92b1-5a08-8fcb-0bfe1a06509f",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be4436ae-c71a-5b0e-beb5-452ee718df39",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ecdf66-bf86-5bbc-bf29-3d6cc5cb7330",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32cd9403-2fc2-51e5-b2a0-8f2a22e5aeeb",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e7b728f-3e61-50e0-a2cd-646982c1aa4a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8eed213-8f4a-5c6a-b14b-1df637e3b943",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10276612-9ebf-55b3-9efc-e22dd943427d",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdb7db60-be3b-5f0c-936e-448e268775be",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1895efca-8685-5141-8015-bc48ad207f05",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a2515d-647c-5fa3-affa-44caea3d80bb",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c07031bf-a94a-51ea-972b-dfee0443f6d7",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dea3de8-fc5b-57bf-8dac-af4263c7fab7",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-core@2.9.4-tuxcare.9"
    }
  ]
}