{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:02ca5ba6-b6bf-5709-ab23-4e11ab76fdbc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-transcribe-aws",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:38650bcb-c5fe-5490-a102-da1696f4fb5d",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5199aade-9df6-5746-ad17-3b9d9b313e0e",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d26ae5b2-31fc-59dc-8062-c7d67f19af83",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82c2350b-a53d-5257-a897-c7d4338f5bc4",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c65d980-78dc-5daf-9d17-8431c63ba55f",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:965de477-93b9-5b95-b0b9-3348d06efe59",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:495ff0bb-7817-57f8-9f97-4e6900dc1352",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:408bf0b6-4440-5947-8148-27963c12c0c3",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df6bc39-5359-5887-b508-717dd1abc652",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1e23c3-18ae-5bdb-953a-fe74cacfc086",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47dad031-c2fb-5952-b3b2-9c6964c3b99a",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7dbcf7-a9c2-5fc4-b511-211c67b1b635",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5daab269-0824-53dd-a966-2881d2085454",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c19e7496-75c5-5021-9f6c-8c4a5df3776c",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9faac846-b73f-543e-8b98-88a5830f9396",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35b86854-f10e-529c-8055-896dc1047d6b",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aefd95cd-8d4b-52bc-921a-a801c7725eaa",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bef4b808-b21c-575a-8682-a0fcaa39cd71",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9d27912-5591-59ec-ad89-b1a2a4b60f87",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03ca53db-1842-5696-8177-46afedd615d2",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbdd135e-3348-5bfe-a39e-4aa4d90a8204",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e993be9-53cd-5b03-b78a-7a171c521345",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:093dd87e-e770-5ba8-8e7e-89f5f6b94736",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aae9883e-e0b3-56ea-9f62-69b35f4c1971",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4e64d47-9d49-5ac8-8e7f-3ce0b611738a",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70f098ce-95d4-544e-b519-0d4b08c00705",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:503620e7-14a5-5e11-8709-2386e1c74d4b",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41ed0366-aea1-5369-bbd3-a85037c90f55",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0b7b661-df74-5499-8517-99fd3e64d061",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4de9c46-624e-5bcc-ad13-617399012506",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47adc7d3-9c43-54d3-a226-2716aaf761ce",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6e47e7a-41d8-563c-b3ac-54e3ffad912b",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a8beeb-4181-514a-b620-2cb21266840b",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c68d544-6457-5145-b0e5-7ff2cdd691ad",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:680f4713-df26-5b59-b413-b2000de48a48",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7365ec0-9c51-52f5-907a-b85da9ff86e9",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bafc566-a32a-519c-ad0e-1ccb7aac4286",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:549238ac-884f-53e0-9d81-d24b0862a075",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91e0b07-b197-52b4-9749-ff78f6dcb2f2",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4727f1f-5e23-5e36-8cf9-2c5be74af8fd",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:599810f2-fcbd-5063-99a6-7ebb5965d08d",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c747f58b-a0da-51e6-8bef-24141a927b25",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23469c05-3516-545b-b19b-fbb3a830eea0",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55261778-8c09-5ada-8fc0-11494fd2fade",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae8721ba-5377-5397-8a49-37440bf57eed",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5a2e37d-b129-57d4-9640-59c4c3b2907b",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48cc758f-9c69-5f59-be1d-35e53cceca3b",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9dedbe7-7708-570f-9694-796a5e6b3070",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69ee7d2f-7d44-58c3-8abe-1df1e5b2645f",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-transcribe-aws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-transcribe-aws@2.9.4-tuxcare.8"
    }
  ]
}