{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f4b44d18-55df-515d-93ac-8be7af32d40b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-java7",
      "version": "2.9.4-tuxcare.4",
      "purl": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:541173bd-9051-5d74-8865-3785d6ebf75a",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b80dda23-d693-589c-b57e-8479ad92ff06",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f5454b-7879-5573-9acb-cbde2f7a415e",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6f4d301-bd97-51a5-90ef-cae687ab81b2",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d1abf1d-75c2-50ba-af1d-b4473956b845",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9720f92-d586-5216-ae9b-8d74752e3443",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4939475-e4c0-59ce-8564-3c43e24f8e76",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:912a849b-0902-59b3-9e1f-214f2ecc5768",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a2af023-8c42-5af6-9ae4-e459ccb0eaaf",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c512a676-4449-5e6f-ae1a-976bbfa74d17",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ac80f20-10b1-563e-b539-3bd5cce65a22",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9129b515-fcbd-5b7f-a5f9-6e8b5ab913c3",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6ecab03-0261-5762-b8a9-396198c7c344",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8037852-7398-59ca-997f-9e57a6652e1d",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1595c30e-251e-51fb-8a9d-3332da3becff",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1b07520-4e3e-5a05-8b9a-a67a99c54f31",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88a7b736-5f75-5b1c-b628-d31e910747f2",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ad790d8-f36e-5ac8-85a4-e22a6cf28661",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:925be2c2-ca77-5244-8623-9abaf498a71d",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97f142e0-95e4-59e6-aa47-97a766fd941a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91a473b8-d378-5393-8943-bb8187bb4bf8",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a09f7a85-23c3-564f-9c91-ec491561bb7a",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:596c1786-ed77-59d7-bc40-701b9b353b41",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fead53c2-da84-5ea5-a633-b57fa6b03c94",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eebbe259-484f-5a62-b3f5-a70cf3e69224",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e186ea3-f346-554b-bb0b-4b4ff6747ddd",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ee2320f-ddbb-5d3f-bc66-ca887c7b4fcf",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5edab459-4dfd-56ee-8cd4-9e029baae082",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9443eb9e-ba36-5aeb-b808-d75ba8fbfbe2",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de77e785-6bf4-5b88-b337-194e14be3bf2",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db4ea78e-5702-5e92-b04b-75845167f86e",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f60b8a6-7dfe-5331-aca1-716edb243035",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e2f2e4-65f9-5776-bde3-32fdadd9de8a",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:374d6f6b-208e-5642-b110-a770ce07e571",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d925538-39a0-5ac5-b586-5bf5dcc4cf21",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0951a00-3e1f-53f4-99ed-24eae1a80d5b",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fbd5d90-8692-50de-994a-341c65e12ba1",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22bf9b4e-214a-5967-a67b-b3c8407e7555",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d4b06f5-7ae9-5e0f-9833-6ed6343980da",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f0a951c-03a0-525f-9f8b-3a143baaf8c2",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8cc86e3-6d96-55eb-a96e-c4dc9339a78d",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c428f561-fb79-541e-a594-224fe13f5cbc",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acd34c3f-23b7-50e4-937f-2a1667f421b0",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:301a6881-c5be-5840-bd83-2767c307b83f",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc97a317-9fb9-523b-9aa8-b5fba9701494",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a2cc472-8fcb-50b9-82f7-ab57b26da76c",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bca98b8-28df-5a43-9a1e-e9afeae1aa4c",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8fa26ed-0a5c-5742-8645-c8e860d4e805",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.4"
    }
  ]
}