{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f4db2b4b-f066-5e07-a5ef-b4297739488c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-xmp",
      "version": "2.9.4-tuxcare.8",
      "purl": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8d7082ff-a45e-58f9-9055-5101dd428ed8",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfe3a88c-0145-5282-a7fe-8428bc10ffe0",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e523ce9-fe8e-5463-ab7c-cb35b164b012",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a7c5f3-c8be-52c3-973f-5a728fa5c727",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f362e9eb-b002-5ecd-99e8-0d74c3683d00",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abb0daa5-22e5-52ad-9165-c5944b3ee5d7",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aebecda1-7951-5901-a085-d051509a7323",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87212592-039e-5fea-bd47-939392a63aa5",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dba1569-a0b3-5a7f-bf6b-b7571da572db",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c3ba5c2-b893-52fe-9ac7-febd30c9ec6d",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13dfc297-33e5-5afe-8518-0aa44bf5b3c7",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2809a4a3-f16f-5b31-8797-f9f56e55c085",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5b8f7d5-fda3-5939-960a-4af785157afe",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a56bfe9-c6cb-53e2-ae5e-6611ba0bc016",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:631d7c78-e3c8-5be4-acc7-f71619556439",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7055b9e-3299-5e55-ae17-7542c64b76d3",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9c9a27e-6c43-5c38-bcd3-d9c0a3ab5bda",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4290d3d7-34d5-5960-83bf-85493fc3a00b",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a7b4413-9ca4-5a94-bba4-dba176c00033",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c386613c-694c-5301-a625-cd7eed4d3f62",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d30230bc-2f73-5468-b02d-dcdddb1d9d1e",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c7f5ae5-677a-5d41-a65a-032c7006ac95",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67dbf8ff-d957-5e2b-8663-84aeeb060e46",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f5fea5-0026-5531-b2f4-a94408664075",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec3f13e9-6ab3-52d7-a705-93a0dd0e29fa",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c07f021-502e-5b6e-b2aa-f98f56a89346",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5278b88e-14b1-59e7-a29e-0fd6349907ea",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1935c44-f3af-54e0-8b39-2056163ee01f",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e08783c-e8f8-5f20-8589-4314799c60a9",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8e63277-a7e5-56e0-9dd8-81fedf9f2a2b",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2b189b-cff5-5d7d-a160-bcd3606b6afb",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:439938d8-4314-5b6f-9f7a-7ec372c47795",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a38b9629-f884-5a08-a28d-5eb1fa06b998",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f3921a3-97ab-5d87-8aa0-38ae9beda07c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed80915-510e-50fc-ab4d-0b0c5a33ed92",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c56a145-d033-5cf4-87a0-f224dc100ef0",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:991c2927-a918-566c-8715-a74ed6b28aa1",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca0d842f-7a1b-5d98-83c0-8bde7c536f82",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f68eee07-a8ee-5d0b-afbe-0f25937d843a",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c7606fe-ae5b-5d6c-be21-8e06566219f2",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:375d32fe-eea2-55c5-930c-8e393068513f",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c24b467-d966-57ad-81f7-069e9e8fa387",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:670b2c71-713d-5158-8513-4d67928c63df",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e54b3e-01ef-568c-b34a-3387aaff14fc",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:585794ac-b3b2-5552-9401-4a0050304d3f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6785ffea-0422-55fd-b8d3-866cb8171b9d",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f2ed7a2-b7ea-5aae-9797-d0dd5de92bc9",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8922a905-c1fe-5bf6-94f6-a480fd4db339",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5d3e83f-46ab-5e83-ab38-125c92cdbdb9",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.8"
    }
  ]
}