Search for packages
| purl | pkg:maven/org.apache.tika/tika-core@1.20 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-10094
|
A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10088
|
A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-qw3f-w4pf-jh5f
Aliases: CVE-2022-30973 |
Regular expression denial of service in apache tika We failed to apply the fix for CVE-2022-30126 to the 1.x branch … |
Vulnerable |
|
GHSA-rpjm-422r-95mh
Aliases: CVE-2022-30126 |
Regular expression denial of service in apache tika In Apache Tika, a regular expression in our StandardsText class, used by … |
Vulnerable |
|
CVE-2020-1951
|
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt PSD file can cause an infinite loop in … |
Vulnerable |
|
CVE-2020-1950
|
Uncontrolled Resource Consumption A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser. |
Vulnerable |
|
CVE-2019-10093
|
Uncontrolled Resource Consumption In Apache Tika, a carefully crafted `2003ml` or `2006ml` file could consume all available `SAXParsers` in the … |
Vulnerable |
|
CVE-2022-33879
|
Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we … |
Vulnerable Vulnerable |
|
CVE-2022-30973
|
Inefficient Regular Expression Complexity We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. … |
Vulnerable |
|
CVE-2021-28657
|
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's … |
Vulnerable |
|
GHSA-mm7m-xg4h-6m52
Aliases: CVE-2019-10094 |
Allocation of Resources Without Limits or Throttling in Apache Tika A carefully crafted package/compressed file that, when unzipped/uncompressed yields the … |
Vulnerable Vulnerable |
|
GHSA-mfwh-gqx8-c787
Aliases: CVE-2019-10088 |
Allocation of Resources Without Limits or Throttling in Apache Tika A carefully crafted or corrupt zip file can cause an … |
Vulnerable Vulnerable |
|
GHSA-f58c-gq56-vjjf
Aliases: CVE-2025-66516 |
Apache Tika has XXE vulnerability Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-11761
|
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable … | |
|
CVE-2018-1335
|
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to … | |
|
CVE-2018-17197
|
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of … | |
|
CVE-2018-17197
|
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt sqlite file can cause an infinite loop in … |