{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2f2e09b7-2c24-50b8-953a-073923449adb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-java7",
      "version": "2.9.4-tuxcare.5",
      "purl": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ad4b5dcb-333d-524e-ae39-f69483f99fc5",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2c4b377-394e-54d3-8261-1b2df0db1824",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bc2e673-0b40-56e8-9856-34dbf8fa4689",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10bceb3b-a9e0-50b5-afd2-68067ee4922c",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb6ed6a0-642b-5c5c-b64e-5ff554c448db",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4511afd-269a-5f30-9bfa-8c9e26a372e7",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b27732c9-ec54-52d0-9def-e20073789c90",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09425a84-e6cf-5eb8-94d5-814bc33e7040",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:793ded1f-47f4-5c00-b261-0738aa9be6e1",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b00b4c9c-1b4c-5967-bea0-5ba217b1c7f7",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76c3aae4-ceba-5ce6-9dd7-b17485f4962e",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b98333-f97c-5f51-89e5-04ee71d7524a",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0153416a-63ab-586b-a3b0-79f448122cbf",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5f01d42-6d4e-565d-8478-721d7e9ed9b8",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f6f0ba-250b-5409-90e6-79d424f14aff",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19473f06-52c9-543e-bf90-c1cdc3011465",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9700ca3e-0f02-5e4f-adf5-c3f90d5ad601",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36c75ad6-107a-5a00-8fc7-f1482e244787",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e85fa1da-2aae-5788-bc2c-311f1002cdf3",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:996e8fbd-b7b1-5269-b8e6-a1ac1a8d2e83",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25eb980a-00f5-5739-9b66-4a1f31c2ae64",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d50afd32-ae74-51a3-a325-30ffeeaf5de2",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b885a11-3ebd-5269-a20c-36f003c1533d",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45bc41bf-fa9b-581c-b84a-106949478080",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceb6796d-b5a6-5dd0-aa2e-48352fd6292a",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c7db4dd-371c-5424-b50f-6da58ef1be4b",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8279c665-02fd-539f-9e00-901ab962d84b",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:412f060b-96e7-558e-8936-1b7334eb8bb3",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f367adf4-678c-50d1-8311-1846d7f7014a",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9f54f9-9c59-5c2d-9ebf-0b8453c9f38c",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b3aa0c5-1bf3-5e47-8ad4-77a069608ed4",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c43c8ca-7b3e-5df2-bf24-d2e5f8f44961",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:657695ce-a737-5f8a-a09d-29a4c725632c",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5ea40c-aac5-5b17-8621-d74ef4b5a8b8",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:856721fd-412c-55b9-8238-d9c43c43e20f",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:798f8d2a-0d7e-5fb4-93b5-508ffb6f25bd",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72034237-0c3a-5668-bb8b-284ad73ff47f",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3250b929-d892-582b-b78b-52ce60712c7f",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f31fc8bb-2f0c-50f3-9f3a-a8eac70af48c",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03c6b053-4e20-523b-ab53-6ad8edfdb386",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f16df20-b1a3-5c56-94d7-673aab9c1965",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94a0f6ec-2c96-5fca-ac44-47e5e41d2414",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93a3b07a-0946-5d25-b507-390237726aa7",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cd0af61-9529-5001-a516-7a7a58e435bc",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78a733ff-67e1-5285-9c5f-bcb82db6f064",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5bf2539-1d3d-52e6-bdf5-4fda6ad721fa",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:076d8cb4-c4a1-5516-84fe-9011ddfc89f5",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6e07cec-342a-5f7d-9680-a7c5e4988fe3",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-java7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-java7@2.9.4-tuxcare.5"
    }
  ]
}