Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tika/tika-parsers@1.12
purl pkg:maven/org.apache.tika/tika-parsers@1.12
Next non-vulnerable version 2.4.1
Latest non-vulnerable version 2.4.1
Risk score 3.0
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
CVE-2022-33879

Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …
1.28.4
Vulnerable
2.4.1
Not vulnerable
CVE-2021-28657

Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's …
1.26
Vulnerable
GHSA-p699-3wgc-7h72
Aliases:
CVE-2018-1339
org.apache.tika:tika-parsers has an Infinite Loop vulnerability Versions of the package `org.apache.tika:tika-parsers` before version 1.18 are vulnerable to Denial of Service …
1.18
Vulnerable
1.18
Vulnerable
GHSA-3448-vfvv-xp9g
Aliases:
CVE-2018-17197
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser A carefully crafted or corrupt sqlite file can …
1.20
Vulnerable
1.20
Vulnerable
CVE-2018-11796

Improper Restriction of XML External Entity Reference Tika reuses SAXParsers and calls `reset()` after each parse; the parser ignores entity …
1.19.1
Vulnerable
1.19.1
Vulnerable
CVE-2016-6809

Deserialization of Untrusted Data Apache Tika allows Java code execution for serialized objects embedded in MATLAB files. The issue exists …
1.14
Vulnerable
1.14
Vulnerable
CVE-2018-1338

Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache …
1.18
Vulnerable
1.18
Vulnerable
CVE-2018-8017

Loop with Unreachable Exit Condition (Infinite Loop) In Apache Tikato, a carefully crafted file can trigger an infinite loop in …
1.19
Vulnerable
1.19
Vulnerable
CVE-2018-11761

Improper Restriction of XML External Entity Reference In Apache Tika, the XML parsers were not configured to limit entity expansion. …
1.19
Vulnerable
1.19
Vulnerable
This package is not known to fix any advisories.