Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tika/tika-parsers@1.17
purl pkg:maven/org.apache.tika/tika-parsers@1.17
Next non-vulnerable version 2.4.1
Latest non-vulnerable version 2.4.1
Risk score 10.0
Vulnerabilities affecting this package (15)
Advisory Summary Fixed in package version
CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also …
1.24.1
Vulnerable
CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
1.24
Vulnerable
1.24.1
Vulnerable
CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to …
1.18
Vulnerable
1.19
Vulnerable
1.19.1
Vulnerable
1.20
Vulnerable
1.21
Vulnerable
1.22
Vulnerable
1.23
Vulnerable
1.24
Vulnerable
1.24.1
Vulnerable
CVE-2018-17197

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of …
1.20
Vulnerable
1.21
Vulnerable
1.22
Vulnerable
1.23
Vulnerable
1.24
Vulnerable
1.24.1
Vulnerable
CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.
1.19
Vulnerable
1.19.1
Vulnerable
1.20
Vulnerable
1.21
Vulnerable
1.22
Vulnerable
1.23
Vulnerable
1.24
Vulnerable
1.24.1
Vulnerable
GHSA-p72g-pv48-7w9x
Aliases:
CVE-2025-54988
Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika …
2.0.0-ALPHA
Vulnerable
CVE-2022-33879

Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …
1.28.4
Vulnerable
2.4.1
Not vulnerable
CVE-2021-28657

Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's …
1.26
Vulnerable
GHSA-p699-3wgc-7h72
Aliases:
CVE-2018-1339
org.apache.tika:tika-parsers has an Infinite Loop vulnerability Versions of the package `org.apache.tika:tika-parsers` before version 1.18 are vulnerable to Denial of Service …
1.18
Vulnerable
1.18
Vulnerable
GHSA-3448-vfvv-xp9g
Aliases:
CVE-2018-17197
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser A carefully crafted or corrupt sqlite file can …
1.20
Vulnerable
1.20
Vulnerable
CVE-2018-11796

Improper Restriction of XML External Entity Reference Tika reuses SAXParsers and calls `reset()` after each parse; the parser ignores entity …
1.19.1
Vulnerable
1.19.1
Vulnerable
CVE-2018-1338

Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache …
1.18
Vulnerable
1.18
Vulnerable
CVE-2018-8017

Loop with Unreachable Exit Condition (Infinite Loop) In Apache Tikato, a carefully crafted file can trigger an infinite loop in …
1.19
Vulnerable
1.19
Vulnerable
CVE-2018-11761

Improper Restriction of XML External Entity Reference In Apache Tika, the XML parsers were not configured to limit entity expansion. …
1.19
Vulnerable
1.19
Vulnerable
GHSA-f58c-gq56-vjjf
Aliases:
CVE-2025-66516
Apache Tika has XXE vulnerability Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all …
2.0.0
Vulnerable
2.0.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2016-6809
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika …