{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:438fd03b-f5c5-51cd-afd1-b5183dde17f2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5",
      "type": "library",
      "group": "org.apache.tika",
      "name": "tika-parser-xmp-commons",
      "version": "2.9.4-tuxcare.5",
      "purl": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:84c64c50-144b-55c4-ba92-e542e26c87cc",
      "id": "CVE-2012-6612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2fe3f50-c1ac-533b-9445-31cfd53866aa",
      "id": "CVE-2013-6397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83ed1227-dc0b-5458-9c50-24d90a082e9b",
      "id": "CVE-2013-6407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19b5259e-79ba-5e97-a612-14dfd7eabd9f",
      "id": "CVE-2013-6408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9aaefd1-40e7-5eaf-9abc-343335a6924b",
      "id": "CVE-2015-3414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d5785c4-efb7-5581-9d7b-c51b983520e6",
      "id": "CVE-2015-3415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56eeb775-5c38-5457-836f-b7a0ca0d7415",
      "id": "CVE-2015-3416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73660b08-ac3d-56af-938e-f252874926c5",
      "id": "CVE-2015-3717",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a43fe0-6078-5376-b2d3-2feb9843b899",
      "id": "CVE-2015-5895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6b176cf-56cc-5bf1-b493-ee105a39f110",
      "id": "CVE-2015-6607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c645c690-77ae-5f21-bbaf-f14ae37458e8",
      "id": "CVE-2015-8795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2355ff2a-7a01-587d-a316-02c28f462c1c",
      "id": "CVE-2015-8796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dd2abd5-4f18-5ef2-9575-fdbd4d049e43",
      "id": "CVE-2015-8797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5bf1fc4-c590-5132-8240-416f841bc9be",
      "id": "CVE-2016-6153",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65a061fd-ab35-57a2-ba34-0c4fb7566632",
      "id": "CVE-2017-10989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3dbb7f3-7bd0-5281-b32b-1154f94d33a5",
      "id": "CVE-2017-3163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae6dd885-397e-5b86-830a-eaa43f5e5715",
      "id": "CVE-2017-3164",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aafa6fe1-13e0-579f-9672-73c9cec134b7",
      "id": "CVE-2018-11802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb23f0ed-4287-5e6a-8569-52b3c7f5965b",
      "id": "CVE-2018-1308",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6068ad13-7af2-51e3-9c00-d200f9b0449a",
      "id": "CVE-2018-20346",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1e0b87-bb5e-513e-b7f6-59c0b662801c",
      "id": "CVE-2018-20505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96ba68c2-5217-5222-b14b-dbb2d14a65e2",
      "id": "CVE-2018-20506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288c17f2-5be6-528e-afda-f1a25ab0323c",
      "id": "CVE-2018-8740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8230ed0e-077b-5913-b996-e1d1c684052c",
      "id": "CVE-2019-0193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29907b39-c3c5-52e4-995b-a521e44fdcc0",
      "id": "CVE-2019-19645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2a91c6-d136-5b25-a2b8-dedee63dc8cf",
      "id": "CVE-2019-19646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30d887cb-626e-5b5c-a658-67328d1ef9cc",
      "id": "CVE-2020-11655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5508fe7f-3442-5431-8c48-d9996763bddd",
      "id": "CVE-2020-11656",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ea48cf6-104a-5824-88dd-335025f8b836",
      "id": "CVE-2020-13434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60f74eb7-d67f-5df5-9cd9-50574137bd67",
      "id": "CVE-2020-13435",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e0ccdf9-b580-5d9f-9446-d57639ac95f1",
      "id": "CVE-2020-13630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ec003e-8b4e-5ac3-913e-5fae062c3be4",
      "id": "CVE-2020-13631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc26b12f-f061-5597-80e7-4470bdb9d820",
      "id": "CVE-2020-13632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e52025f2-ed1c-5237-9bb3-460378cea7e5",
      "id": "CVE-2020-13941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7ecc601-163f-5474-a930-d2dcfd9799a9",
      "id": "CVE-2020-15358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04f85ea1-145d-5e50-9c35-7d7f8162b7d6",
      "id": "CVE-2021-27905",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:430dc4e8-6b74-5f36-a3e8-49a558755c07",
      "id": "CVE-2021-29262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93431346-8507-582f-a0e0-6f081237566b",
      "id": "CVE-2021-29943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5168a04-7cdc-5cb5-8c20-2862b73b862b",
      "id": "CVE-2021-44548",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f965d138-267d-54d4-943e-c75466c9b988",
      "id": "CVE-2022-35737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bc20303-78cd-560a-a168-72c0df27f212",
      "id": "CVE-2023-34610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea085d9f-2b16-5172-9927-ddc7b3f0783f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:975806e2-53b9-58ef-bbf3-279b8e408f0a",
      "id": "CVE-2023-7104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:417bde7c-3a8c-528d-b6f5-b4deab997c00",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a226326-4cab-5be5-88a4-8788cbae57d3",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88f0b131-4b83-58bb-9ad7-b9085c533747",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac059a69-793a-55b9-96cd-1606cc0bfb76",
      "id": "CVE-2025-54988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cd0a9c5-467b-5885-95a7-8a9d042cc6b0",
      "id": "CVE-2025-66516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika-parser-xmp-commons."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.4-tuxcare.5"
    }
  ]
}