Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-j8g6-2wh7-6439

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j8g6-2wh7-6439

Apache Tika allows Java code execution for serialized objects embedded in MATLAB files Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

gitlab/maven/org.apache.tika/tika-core/CVE-2016-6809

Deserialization of Untrusted Data Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.