{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2cbc0329-c48d-5f83-ae5e-b5bda2daaf53",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-translate",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7bc2ddd5-bb88-535f-a8da-c97cc62ed6ad",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15491328-087a-5bb6-abc4-cc646bb8643b",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2b45317-f7d4-5c78-a5dc-a7b97e5ffe6c",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d88bf34-14c8-5ec6-bf50-5971b43b40ae",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:849e44b7-4ad4-5e9f-9ae3-7272d777982c",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d205758d-89e1-56b2-be69-3e81d44189d2",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee306b76-4109-5e69-a1fb-3f69f4e848cb",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebbe5a77-2119-5d5a-80f7-d012f104a2b7",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:540b3084-7206-5523-9b4a-75a6df9ab6c9",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:071a107d-460a-584c-b49e-51ea1308b911",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8464b96-a2e1-5db7-b3af-07c973f8629a",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:055125db-9fc6-5097-8ce2-9a13c64b9310",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e2262ad-918b-5dd6-9a93-d6301bd397e7",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d4f7b4-16b6-5dd5-8a13-d2f8dfd5a300",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9821597c-1527-5661-8fa8-ae9d899f19ea",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2936fc4-613b-5740-b892-7984727dd4cc",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fba4ac98-949c-5dbf-9b98-c0b3e26a4878",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a2c146-d458-53f4-961f-db8b5207da89",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bf68d7b-7bc6-5011-93f3-f261ecbaf6f4",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff9489a-23da-57cc-b41f-4a6b440ca705",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f6bb5e9-8479-5aac-a515-fde27c7890b2",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20a7f8a5-0370-5a43-bb88-bae07b3520ee",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d92d86da-31b7-5858-b7e2-010e4a1319f1",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5160f1eb-0296-5173-9da4-a8ecc7b23f5d",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4b11d41-5409-55a7-af7c-85602ba3b598",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8f44187-e8ea-5808-ab7c-d4891c085236",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a179fe09-04a3-5514-97c5-563a1105ce42",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d9c120a-3ce0-504e-a4b3-ec2742ec10ae",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cbe37a1-749c-5de3-b2d1-21e1a6b5e991",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b8a9b29-59fc-5362-882a-c1e540af6b76",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:508a1f12-350f-543f-87f3-d14f2b0fce26",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:907c883c-bbbb-5b11-b130-5fe1e9765f5d",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfbfe693-40db-52ae-acf0-72f522190460",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1de2cc6-7325-5718-bd80-3714d738ea46",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e02727-c723-544e-bd83-220223f26599",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2327614-ce62-5d28-bdca-2284a2e336d8",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50dfc7e4-6ded-5e91-a673-b9fa94793033",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cba29e7-ea5a-5d24-9fee-8ac4a438fa25",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32085d9f-6aee-54d8-9eef-950e6f5bb49a",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa295efd-49bf-5507-a86e-3d433d5cfc6c",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c551062-2a4d-591a-b5db-c389356b8f16",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11d837ad-0928-5168-9ccf-75c28c0ee89d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a46e1019-0cf8-5b05-9436-a7fc87c36dc6",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaba128b-e692-5bc9-8a78-e50b23c8ba3f",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ea23dd0-388c-5147-9679-8459e66636a5",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39dc53be-ee0e-54e4-a313-0034be6bba35",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b888100-d3a2-57a5-8b7c-3d445515590e",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d097dd7b-4e6f-5b25-826a-c91bb78671ce",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7df9c9b7-d193-5b40-9a27-5722d27dd607",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.8"
    }
  ]
}