Search for packages
| purl | pkg:maven/org.apache.tika/tika@1.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2yb7-v3m7-3ffz
Aliases: CVE-2020-1950 GHSA-3h29-52vh-pqgr |
Uncontrolled Resource Consumption A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser. |
Affected by 6 other vulnerabilities. |
|
VCID-42ad-sh45-7fev
Aliases: CVE-2021-28657 GHSA-567x-m4wm-87v8 |
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser |
Affected by 4 other vulnerabilities. |
|
VCID-8qc9-3mxe-8ydp
Aliases: CVE-2022-33879 GHSA-6q8v-2hvm-fx37 |
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-en59-hstj-8kc1
Aliases: CVE-2022-30126 GHSA-rpjm-422r-95mh |
tika-core: Regular Expression Denial of Service in standards extractor |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-eu4h-uqdw-n7ez
Aliases: CVE-2022-25169 GHSA-7qcq-xp2f-56f6 |
Allocation of Resources Without Limits or Throttling The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-uj1b-pk9r-ryhz
Aliases: CVE-2020-1951 GHSA-3264-3fm9-fg44 |
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser. |
Affected by 6 other vulnerabilities. |
|
VCID-yhgb-qh1t-3qhj
Aliases: CVE-2020-9489 GHSA-4pv3-63jw-4jw2 |
Missing Release of Memory after Effective Lifetime A carefully crafted or corrupt file may trigger a `System.exit` in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops. |
Affected by 5 other vulnerabilities. |
|
VCID-zj8z-ja31-mkcr
Aliases: CVE-2022-30973 GHSA-qw3f-w4pf-jh5f |
tika-core: incomplete fix for CVE-2022-30126 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||