{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:28b47b8d-1258-5281-92e7-d5bf5f8bd81f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-standard",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:60709e7e-55a4-525f-aa8d-cd17db2e62dd",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3da10f-a571-5751-9bbc-9ea9d3de3a9b",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85d6756a-3286-58b5-8acd-a4d32b41c980",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c8122b-9a61-5666-80e0-f8c3ec61fe40",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d9aed7-cc8e-51c8-ae8d-46306887d973",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5ad010b-4cdb-5a23-8ff0-5dc8629069fe",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca63e116-52e6-5434-8ff6-ca3b524d5e9c",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7870342-688a-5669-9a6b-01f2df44c6b1",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac005b5d-e0e1-51e0-adf2-297a8a7334c4",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c17570d0-805b-5aa2-9ef0-fa1156c1ef11",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b1cb234-8374-53b9-aeba-d2d0a9c813f4",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a85da0ac-6cb8-5c18-a62a-8f29c70824ca",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c06edf3-54e6-515d-ab30-a020a1944bda",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d22dc9-e145-5663-86f4-5ed53afd6658",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eecae24-0a7b-5a8e-86f6-d3e198a7b54a",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1229ccbf-71ae-51f4-a4ca-407a01e89b87",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d3447be-abbc-5e51-a26a-cb2531be56ee",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c95af1e-867a-53ff-bfac-e3564beac7a6",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea0d1b47-05c8-5106-adcd-912930cef273",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e721360-eb48-5468-9c07-ea43aa8d4561",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d100ed8-fb9c-5535-8eb8-e43e3d370b88",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6787171f-3100-539d-bacc-59611e457b27",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:203e1b4c-4b47-5e5f-a77b-d99f7a98a1d2",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bcde941-03ad-5914-ad89-a24983583158",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7478e39-fff6-579a-8cee-910006196d81",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2603c0dd-4ff9-5d94-8e93-6b3dc4b4c0d1",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca224f2-d527-5e22-9789-286230f4b79a",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d174227d-1206-5ff0-ad4a-5df9a1ea9143",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d3e6b34-be22-5fa1-b721-5ecd163e98db",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad64ab08-723b-5cf3-81f1-71f5f57d38e3",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05750feb-a1bf-5939-90fd-adb41339ffb5",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78ab76df-c994-5663-9074-efd1d600573e",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2bc5a98-a495-5ab6-9cc1-58d64b9c711b",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0da7cd17-e77e-5c31-886b-9bf93df768fc",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afb8b56b-b87c-5264-8bdb-b48154bcfa42",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e067f702-b925-521a-a958-b71ee44fc473",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53362820-fe7c-5d4a-8239-b2ec65e81d6c",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9390c341-9cf5-54dd-8467-620e27520002",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b5bdcd9-ff2b-55ad-91d3-9feb617d792d",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63620a5c-4830-5e8a-9ce7-ffc6282f9f25",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05d15168-53df-5c33-a6f1-0107cac8efbf",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae19e51d-f934-58df-abaa-bd21bc3b5d33",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e1945c3-83fa-563e-aa53-2bb476b3080c",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ade71938-65b8-5664-a6cb-279038b60c17",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:269ec660-8959-5f64-a832-1261e2d8cb92",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23f9e4ec-12c0-5d69-a918-c435be94713e",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59ec6a07-f230-5fb8-9f9b-c3de016fb188",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:544e6c2d-d472-5780-af3c-f9cf680e3cd6",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7705b3fe-b5e2-5008-bc2d-9bb9a7485b2b",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.8"
    }
  ]
}