Search for packages
| purl | pkg:maven/org.apache.tika/tika-core@0.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-j8g6-2wh7-6439
Aliases: CVE-2016-6809 |
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files Apache Tika before 1.14 allows Java code … |
Vulnerable |
|
CVE-2022-33879
|
Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we … |
Vulnerable Vulnerable |
|
CVE-2022-30973
|
Inefficient Regular Expression Complexity We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. … |
Vulnerable |
|
CVE-2021-28657
|
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's … |
Vulnerable |
|
GHSA-5mf7-26mw-3rqr
Aliases: CVE-2018-1338 |
Moderate severity vulnerability that affects org.apache.tika:tika-core A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's … |
Vulnerable Vulnerable |
|
GHSA-6jq2-789q-fff2
Aliases: CVE-2018-11761 |
High severity vulnerability that affects org.apache.tika:tika-core In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit … |
Vulnerable Vulnerable |
|
GHSA-h8q5-g2cj-qr5h
Aliases: CVE-2018-11796 |
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack In Apache Tika 1.19 … |
Vulnerable Vulnerable |
|
GHSA-4xr4-4c65-hj7f
Aliases: CVE-2016-4434 |
Apache Tika does not properly initialize the XML parser or choose handlers Apache Tika before 1.13 does not properly initialize … |
Vulnerable Vulnerable |
|
CVE-2018-1339
Aliases: GHSA-p699-3wgc-7h72 |
Loop with Unreachable Exit Condition ('Infinite Loop') A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache … |
Vulnerable Vulnerable |