{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8b8d86c8-8bb2-5109-afe2-f804b1337a1d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-xmp",
      "version": "2.9.4-tuxcare.9",
      "purl": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:817642e1-39dc-5bfa-97e7-9c19cb604146",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3dc605d-c935-541b-9d49-918813c34ad2",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ac4a5b-0c8f-5608-9394-f79dc41d9973",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afa417bd-35c1-5dd7-acc4-c2853ea22c38",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2489cc36-e808-55b7-85f4-65962395c0a0",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55761feb-c79a-5b91-ba97-668a44bf7d21",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:306f01e0-ec66-50da-a52c-8faacd939302",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64253007-a401-5098-ba38-9078c4619f1e",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42cfd491-a273-567b-bd99-c7c73b99db4a",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b1a604a-90c6-5e62-9bbd-b82585cb9953",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58248f29-4c91-55af-ba40-6ca389657271",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:776c770f-c61f-5252-a465-276897c168bf",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94813080-cac6-5ce3-9236-d4d91a45ad13",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b78e1166-b86e-54aa-a6cd-75dfbfc57208",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a8b999-810e-5633-a380-c236d47aaade",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eef67bf-bcf6-5aac-9fd9-763a67aa9111",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6833785a-78da-59a6-90cf-72b2f81e518b",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bb1a54e-2697-518f-a4ab-80e9c33b9fb9",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142289ad-af36-5e47-a25d-a07e61402ef3",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe4c380-3c5f-59cd-a27a-ac6ff24b7fff",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f03416d2-8852-507e-a2de-93039af3eccc",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2e70f49-a19d-5733-9f74-815074e68c50",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab4047b6-b34f-5784-bea7-517d52ce6af1",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf950a7c-4f78-527f-abe2-6c5bdefae1cb",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ccf1446-9690-5d37-8e6e-5ac51e98d226",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b4b1766-5061-5c09-baff-e8082a4a8a87",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95a3a406-a0bd-5611-b8df-ece7db445142",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f4de1ae-b908-5205-88ff-9b03b3e63ed5",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc9b8306-69f3-54ad-b94a-42d580e3df64",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3002091-1221-5430-bd96-f93a9a045c9a",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0899d3c5-5edd-5179-b0aa-1d262931344f",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6591ef34-ad69-5347-a409-c8747abd1c7e",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d1ba35e-4cb7-5a9b-aa5d-3e0bc77e7b0f",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8cbdbe5-6e8e-5881-a724-91ceffe2785c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baa6aeae-8364-5e9d-8fb5-758faf74ec67",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07d18b89-fc7f-5fed-9253-25bdb5501d7a",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f975700e-b554-5b80-9487-a48590e09dda",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e5bcdb8-7f2f-52fd-be86-00e848c024f0",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cd05ca3-d1f9-5678-8b16-13fe6f1e57f3",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aafaecec-f452-5ec5-9433-adf380a83f15",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68b41cc5-32df-585b-822d-0cd2234bc87f",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1d06081-202f-50f7-aba2-95276a714faf",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81d5646a-075f-5f17-87b4-b741d4edd3c3",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d0bd6a-f8b4-5807-8f16-a5f27fe59adc",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55dd3dc-efa2-5775-b848-d0784e2b4d36",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb9f2d7f-51bf-58ef-9a56-158201cfcdaa",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5afe8fb-1fc5-5162-846d-eca24d802815",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f108b3d1-e66b-5d1e-8e25-750fafd6eb08",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916df836-cba8-5ae2-b279-fdbe4c8d4c98",
      "id": "CVE-2026-66755",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.9 of org.apache.tika:tika-xmp."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-xmp@2.9.4-tuxcare.9"
    }
  ]
}