{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d9b47dbc-abbb-54f5-912d-8940314ea4ca",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-server-eval",
      "version": "2.9.4-tuxcare.2",
      "purl": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:27cf258a-5520-51eb-8c2d-569bbdb38610",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75fda19b-42ea-5816-85eb-a244e05fb8e5",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aa9bb74-3394-573c-bc27-d7fd36ba472d",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf34e80d-692c-5cf0-b798-872fa9596aac",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d41b8e5d-0c30-5d24-9d97-5612e12acc1c",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82ed29e1-f914-531a-8fa6-f313c00d5bbe",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ebf4294-ba8f-5e1d-b064-ef112d27cc19",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8409878-8934-5935-86ef-405eb117258a",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca8d4b13-7bf1-5a20-a8c1-03a9f702f43e",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc988915-eeaf-54c2-9452-b444f9d1c341",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7278f1a9-63b7-5d8c-a0cd-31f29757fcdb",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:209ecb92-469e-582f-b3aa-23a902197ed1",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:166abc2b-5a0a-54c6-a24a-b98732a83c9f",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ed9440e-d817-50be-b7f9-ed066b52ed9b",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aebde64f-4dac-5f4d-958e-995273ff0adf",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e70f99c4-98d2-5dcd-b042-51058f0a01a0",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26fff2e4-fe2e-566a-9dd2-7ae7aa62a8de",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab501fe7-1c61-5fd7-84c1-328bec11b11c",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73abe3e3-64c6-5d97-bc0b-19ef59753baf",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c11061fc-9514-503e-b2b1-9610eedcbf1e",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fe1f7a2-cf4f-5a7e-84c3-076c1cfa69a1",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07e1fd3c-4df6-5afa-b400-9c6915509a85",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb3c3d6-2f75-5da9-ab08-c78dbac115d1",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f58bd551-318c-5eb0-abed-989dc863f993",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d11a5f-e75f-5e9f-97b2-619f7d2d165f",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c5316d6-3147-578a-83c2-50e8793050b0",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76463d43-4b99-594f-92d5-8f2df8b339a4",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2304cb9b-bb50-57fc-a9d6-7de38d790908",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7635496-fee7-56a2-8dcf-34ad999e3001",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a7d7343-c5f8-5f3d-a557-e96e505b3058",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81afc24d-0f26-5f5d-9ac3-a3544f8f9d3a",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6178a163-d5da-558a-9d26-654affef952d",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d01019af-1b50-53c2-a84f-a38856dbc45e",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c68883c9-0933-5903-ab9a-b1478eceab9c",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71f28734-6daf-5e13-b36f-aae246d6bbe4",
      "id": "CVE-2020-13956",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13956 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db203a13-43fa-5acd-9bbc-c1bedd8c388a",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7553ae5d-a166-5fa0-9cfe-f4efda7542c2",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e84751-0651-5979-bfcd-05338bc06714",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e9c8b31-bf9d-5be4-a4dd-83aa86fea235",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba7e0d9e-b9eb-5874-968e-71f4d1fa7493",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ef7ae3-e639-5f13-be8b-95d7558fcde6",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:836e784c-59fd-5818-b419-1a41b5e3de42",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fd5c3ab-c3a8-55b1-a63b-692dfd3c0510",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e38d8a76-5820-5611-8940-cf9f2572f0b9",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e4d9ab-fdd9-537b-ad0d-70ce2f583504",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30bdd0af-4e9b-5894-acb2-9abbb859f64f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aec2912e-d105-5f71-b12b-b68d296b17ac",
      "id": "CVE-2025-24814",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24814 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c574ec2-bed1-562a-8f6d-872f0547eebb",
      "id": "CVE-2025-27818",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-27818 is a false positive for org.apache.tika:tika-server-eval 2.9.4-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05acf348-0e04-5e7e-95ad-fe99f0e96d20",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aba60d8-9bd0-5a43-9671-08f6a91cdc6f",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f968e75-09e2-5976-ae0d-22eb9ab78a72",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bf64301-5ff0-5ab0-b523-6691385a30cc",
      "id": "CVE-2025-6965",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-6965 affects version 2.9.4-tuxcare.2 of org.apache.tika:tika-server-eval."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-server-eval@2.9.4-tuxcare.2"
    }
  ]
}