{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:72cf2ca7-ef58-5127-b728-f63d0cb53e60",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-standard",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:678f62bc-0f0b-5f06-9acb-a7979da3b497",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:904440dd-8630-56df-92f2-8863046ecd10",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b902c4-8650-57a0-be7a-8e2e2c7f2e73",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e370eec-e376-54f4-999d-d3c7bddf0f59",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd7aa1a1-c863-5566-9430-c06d5782daa7",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20a434dd-9ace-5684-b859-f568f1d05b4b",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3967e520-6f13-5f78-bbd7-031e2d599362",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9c2c2e-7e9d-576a-ba34-fc1dc13bf72e",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d3bb240-3a15-56a0-87ed-c999aa645c17",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a352330-ad1b-5445-9884-d111b98e19ac",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a079992f-dfb6-58bf-9642-73123191f9c4",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06538bfa-8321-5ba9-a0ab-d8e236b850f8",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c55bbc34-e457-51c9-81a3-48076e6efaff",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb8a8178-9106-596a-a3b5-add890091e67",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4afd4b7a-e98d-5ef1-8bf1-4db12693ed65",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f37d1185-79bf-53b5-a0c7-61b895841f4d",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd89ac16-1276-5334-870f-598813692e4c",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a43fe65b-57ff-5ecd-af3a-04a40f0b1947",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7786910-c747-5d7f-bb25-52fb88063312",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63604b1d-38a4-53d6-823b-4be92a69c053",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7aff54e-f09a-54ef-9bed-80c34e202dac",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d916f5dc-85d0-584e-a111-a742347aa13d",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34c94ac6-6722-5473-af6f-636e5a7ea159",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aebf5a12-50f7-5a70-a94f-7062c22112d6",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:930a3531-03ad-5516-a161-1d05ed908fa8",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:625f3b89-a459-51e6-9e2e-5ed2f58a700d",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ccd826-cce8-5139-87c7-bfd2a03060b8",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a86c777-01f8-5dbd-a6fa-abd1db647ead",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc6bd3ba-c993-5f1f-ab28-6d732cd135cc",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f33c70-6759-59ea-b6ad-19126c64c198",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:715c2cf6-b026-5d70-b14d-ff2f1966a1aa",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe2dee78-0bc5-5865-9dc9-4abbe4784af8",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e83cd2-6542-55d5-a5b9-e467945404a2",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:575a327b-8a01-5158-b6ef-e883c55dd90b",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0498bcdb-7ef6-551c-93ee-8a4bb403be1d",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87ab3ff7-5ad0-5105-9cbe-63937a9c3850",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07a10835-94d3-5e29-9681-c3bb3c151714",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d24fb6-9ce8-5f6e-bdc3-eaf3bbd2dd15",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b63476d5-a8dd-507d-8297-02abc4c1f1b6",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2420d17c-115c-59f7-9aed-6ff8706d12a9",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a93438bb-0887-5533-a824-30580bd41710",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:531f1bac-38ca-5710-877f-56095c74804f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d033809-ca90-5997-8d4d-2b3295870492",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12c07086-8b19-59b7-957f-7725d389e94c",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b151ed-1ec5-5946-9886-66ad67a19ad1",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dccb1d3-3b23-57b8-a397-a85f7baf931f",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42e69395-4f89-57c0-a847-5249c76cc8ca",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9351f7ab-6ef6-5c9e-8687-f84ef95e5e92",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f7c1488-8a23-5b56-b9d2-6b266b0a5501",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-server-standard."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-standard@2.9.4-tuxcare.9"
    }
  ]
}