{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:57d86115-c41c-543f-a794-0205a93586bd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-translate",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:08785a92-d5ee-5f8a-a90f-9148d88ec2ad",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:214abfc1-f1e7-515d-af65-3d637550cc28",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f702e7e2-e366-534d-b1dc-f6b5b71f189d",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b8ee16d-b76b-585f-9e1d-37738f1d411f",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2950b2fa-7f0a-5dc4-b8f6-fd1cb0be46f6",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8950a126-19ab-5cc4-b812-bd0e707ccd8a",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59d44b83-fa77-5007-8bd0-3f17745eb498",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6e91f83-5571-5677-8cde-97bcb1ae265c",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6b04bbc-33e9-581c-8e4b-4b00ea2a79de",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63fc6840-3f60-528d-97ca-b433de398ae9",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ee64c08-6043-5a28-8cb8-2271f14f0554",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7d0e591-643f-5f4d-ad29-6e3cdafd54f9",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b4a1a0e-28f9-5649-836a-a13aaf2f00c3",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90125ef8-1803-540d-abed-7a2551a9558f",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2c7e97a-558b-5d5d-b350-a4b4cd43e81e",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153bdea3-6d46-5113-8a20-c3371b8b5195",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f07efc-fe5f-562d-b385-0f760ea4f6e5",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b785b7-7213-5765-b598-030d24709762",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d82ae58-5b5a-5ded-9eff-6ccda0791c72",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:585c5f18-a65e-5147-802b-895a7aab271b",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfbe89a8-587f-5538-9d0f-c10b38097b4f",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eeb6c7d7-0045-59cf-b804-f80fb6428f7e",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:679e6961-1215-5c94-97df-81d13e3b51d4",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbfb56ad-5d6d-5e15-9ca8-a5f721310929",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ebab2f4-fa1c-5fe2-a23a-ed1af375ffab",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d1a7cd1-62cd-5bf6-b603-5777ee93d92e",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b23883b-4552-5bc0-b829-8ac4f68de3df",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ad0eab8-9fa4-5af9-987c-9541c6701778",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e59a3a4-226b-5b51-bed3-42aaf23755a6",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bff3b4a-a6ff-580d-91f7-0e7949d4990f",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f832695-4be3-5d69-bea6-e44713b2472b",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58f8cc7c-51c1-558a-b962-363204483cec",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0d7d1f8-7314-55fe-911d-3a94a1fba3db",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a473f06-6dbb-557e-a714-25e3d1302033",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5b8d26e-927d-5587-a134-ec7ca2d29bdb",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:015ebb94-2d0e-508b-8ae3-64eb385af1cf",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91e4d0f1-9064-5b58-8219-6633d397b76d",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a274c09f-7701-563c-ab6c-ca829a5b2e68",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0835b87-9391-529f-bb11-629984b01b8b",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd042e64-ca05-582b-a44c-ab67d0fd5e61",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3345a1ce-f78c-516d-b9a6-78328ece98e4",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27a9da6f-cbb7-587b-8452-2bc6ebfa2d77",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac8aad16-79f2-57dd-bd8a-2bb6d04ca715",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02bec26a-855f-5cc8-8c5e-ebce6941cf29",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f12a950-b405-5d63-a58b-41a6e0544306",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fcb7c5e-f581-56d3-854b-aeb7c8442ae6",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82d2cf1a-47df-5d77-9f8c-6bc1120e1f6a",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5c36a6d-4b23-50d3-9693-029efcd1100a",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f20b8b64-cd81-558c-902b-0b96f5cc70a8",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-translate."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-translate@2.9.4-tuxcare.9"
    }
  ]
}