VulnerableCode Package Details - pkg:maven/org.apache.tika/tika-app@1.18

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.apache.tika/tika-app@1.18

Essentials

purl	pkg:maven/org.apache.tika/tika-app@1.18

Next non-vulnerable version	1.28.4
Latest non-vulnerable version	2.4.1
Risk score

Vulnerabilities affecting this package (3)

Advisory	Summary	Fixed in package version
CVE-2022-33879	Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …	1.28.4 Not vulnerable 2.4.1 Not vulnerable
CVE-2021-28657	Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's …	1.26 Vulnerable
CVE-2018-11762	Path Traversal In a rare edge case where a user does not specify an extract directory on the commandline (`--extract-dir=`) …	1.19 Vulnerable 1.19 Vulnerable

Advisory

Summary

Fixed in package version

CVE-2022-33879

Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …

1.28.4
Not vulnerable

2.4.1
Not vulnerable

CVE-2021-28657

Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's …

1.26
Vulnerable

CVE-2018-11762

Path Traversal In a rare edge case where a user does not specify an extract directory on the commandline (`--extract-dir=`) …

1.19
Vulnerable

This package is not known to fix any advisories.