Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tika/tika-core@1.28.3
purl pkg:maven/org.apache.tika/tika-core@1.28.3
Next non-vulnerable version 3.2.2
Latest non-vulnerable version 3.2.2
Risk score 10.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2022-33879

Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …
1.28.4
Vulnerable
2.4.1
Vulnerable
GHSA-f58c-gq56-vjjf
Aliases:
CVE-2025-66516
Apache Tika has XXE vulnerability Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all …
3.2.2
Not vulnerable
3.2.2
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-qw3f-w4pf-jh5f
Regular expression denial of service in apache tika We failed to apply the fix for CVE-2022-30126 to the 1.x branch … CVE-2022-30973
CVE-2022-30973
Inefficient Regular Expression Complexity We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. …