{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0699a0d7-ac12-5d38-814f-94c8414127d5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-eval",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:553068aa-b3bb-5efb-89b8-aea426615da9",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7b937ff-d464-5138-9a04-27df608a6dd7",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22a74665-17c2-5e57-83d6-d0428d0a45e3",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3d62738-8343-5519-9045-fcb206391e31",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87eebfdd-e907-580d-996b-8963ac1f3398",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70ea8405-00ec-54dd-a63a-40023034253b",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5691e410-bc1e-5d87-8f09-ba7691441803",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dde46aa3-a4e6-5ea9-9f7f-76cc75416d70",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d35aef85-2588-5120-a4bc-8b074eceafc6",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3e49788-f87d-549f-a9df-fcbde7fe7416",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74878d74-dea2-5c7d-8d89-9e1c7c72be4e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4ff8ae2-93fd-5208-bb42-38398b1fef4b",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99cda981-6734-5d8a-b7fb-192f50dd4288",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d876d35-2405-5820-9901-6e751784361e",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d84efa10-396c-5fbb-97fe-31810ff527d0",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31c6d915-de62-5067-8c2d-ce21b942bb30",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebe705ad-99a9-5e74-8fe9-3084d6e552a7",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e188ab4b-753e-5894-be82-47c59865e979",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6e4621d-8f14-5c18-9895-0c75b76894d1",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbbe39c4-0910-5e3d-a962-ea4c06a83802",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02275e28-695d-5806-b42a-3d2f8e2fad96",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af518e36-6393-5369-9fd7-c8613f1c0bd8",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40353f54-48aa-5869-bc04-5c7104ffb973",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f8d2c23-1086-5edf-bd0b-9a0ae42ea71a",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:299d471c-a57b-5570-913d-ed3abf516fbc",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d1d9f22-b2c9-5185-b4a0-20e56a464186",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:558ef96a-1ce9-5e53-a876-64c8571c09c5",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f40fb33-3884-5b4e-ae48-161b4eb68333",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2927a75-1114-5de2-8606-acab81fd86e2",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:924e8701-a170-548c-9d75-b8f062a8f0f7",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af7f2ab3-0ca2-5e4e-9e60-97e34d0c8760",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ac6b0c4-205f-5992-9657-25e19268612f",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf0fa818-c46b-54bf-ae47-5fb52a63a921",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:544c5eae-625b-5c52-a728-b0f1eae772c5",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:887e3ff1-223d-5cf6-b172-f57d718fe963",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fe78db0-7930-5840-95df-c19cf0e30614",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a524de-0e8f-55af-b774-62a952bece4f",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f22d0a0c-26da-5789-a8db-1da7549724f5",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5273babe-1471-504d-a7d7-9215482d1bc0",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b14d00b-8fb6-561b-8d68-0fcf4f49993f",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8142593-2981-5bb6-8d7c-c8203ab51fcc",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f94028eb-7cb4-5898-9011-4c8fc9cc7413",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36b4b8e6-972f-553c-a397-01c81f684694",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd812f8b-9f4b-59d4-8155-7ba7eefbda90",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:944942fb-5de9-5bef-91e1-3710207ba6ac",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8410f414-c153-533f-982d-7654b9284be6",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2d666cc-7823-50c7-8fde-6bd52c571154",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778dfc14-5593-5609-a633-e80d62affd23",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a609011b-c248-5ded-ba8c-288e6793f417",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.8"
    }
  ]
}