{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b832fbb6-9c5f-5cbf-9ae8-37249c0a6417",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-eval",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:eb462bca-7269-562b-b13c-a4d60b309000",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70c2717a-3ded-5fe4-8cff-048ef2cb284e",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4748f1b5-f6e1-50a5-863f-ae575908a8ea",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3680d289-da44-512c-91b4-668ef5d94554",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fba0b53a-4962-5cbb-b552-8f8b1a181b75",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1c05053-cf08-537d-88df-59a8448132c5",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7183dd3-92bf-5b1e-bc01-da1c97e8ba66",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1b49cb5-ee66-5be0-935e-e99b42ac88fb",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d147f9-6a77-5fc8-abf9-eb5ddc4afb46",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5885a995-db21-523e-a34a-9ef989446680",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2821fb56-450d-5ad5-bd68-1381d9515efb",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82fdd6c4-a6d3-5a86-b84e-d0a75e6da795",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b89d138-87f6-50f3-ba0c-ba4a5fd00ba8",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:411e33f2-54de-5d8d-979c-38d1feb0d09d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ff917b-e1b6-51aa-bd3a-e3f287ac7fc6",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47554237-b218-5e75-a370-b9eb3d1477ec",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a3aecd6-ae94-5241-a562-41ee2f067dfa",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0cc4e1e-a597-5cb3-969c-f30b21f8199d",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72f97b76-5910-5a0a-a294-6c2ace4dc056",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d23d91db-df2b-59e0-931f-88d03841a248",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d555d6f8-8012-5969-92d3-3be046944d6d",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a1bea70-3a96-5a9f-b4c3-d0e4060f2dd2",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8c2bcd8-0743-56de-96f8-7a192755a3a9",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75abaa3e-9952-53a3-9199-c8b7d897cc77",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25fdca13-e318-5125-a7d1-a6f98587c116",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9639e06b-4cf3-576b-a03b-58cffc3f8f98",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:752cf4ce-a998-5cb1-8dff-d3c16216c461",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e673120-a795-5257-93a8-35bccbec69b1",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79e934f2-d2ac-5a20-a252-a271cd649a9b",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fcd9d12-d688-5afa-8742-56964369ec77",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa97fe8c-eb71-5c65-8be6-81b9b7786bc7",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e1779e-4fd6-572d-ab04-d286e182202c",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b922b026-75d9-5667-b241-b6976d5f5506",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c3e1dc0-77e1-52fe-ad62-356642a0e51d",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02aa9048-d828-547d-86c1-c47af5d5a7b4",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00bdc0d8-713e-5608-b1b6-7bc5ccee0954",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:167c587f-b3e2-55a2-b966-788d5e36b1c3",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce8b44f5-c32e-5813-9ce3-b90828dbcd68",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:209ad124-c2ed-5a79-b3fc-70cbf063ca6b",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8994fe2b-2325-54ef-b8e7-77c5819813f6",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce26e089-4aa7-5e74-b30c-fb30a6d9caf8",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a731a257-d32c-50c9-aae7-43c989dfcf0b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee39eba-07a3-5ebe-a290-38d1bafb0e03",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:724baa3c-1dcc-5c07-9d37-5bda44bd3ca0",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:416e3188-e640-5f70-b42f-b15d4cc355d4",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b791d9af-e8c0-5437-92e0-dae1faefd372",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f25db30d-58f3-5787-a27a-5df4e0704ea7",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853c132c-353d-5295-9242-b3ed1a272181",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:574fa209-97be-534d-8818-ffd145c48048",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.9"
    }
  ]
}