Search for packages
| purl | pkg:maven/org.apache.tika/tika-parsers@1.19.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-9489
|
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also … |
Vulnerable |
|
CVE-2020-1950
|
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23. |
Vulnerable Vulnerable |
|
CVE-2019-10093
|
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-17197
|
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-p72g-pv48-7w9x
Aliases: CVE-2025-54988 |
Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika … |
Vulnerable |
|
CVE-2022-33879
|
Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we … |
Vulnerable Not vulnerable |
|
CVE-2021-28657
|
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's … |
Vulnerable |
|
GHSA-3448-vfvv-xp9g
Aliases: CVE-2018-17197 |
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser A carefully crafted or corrupt sqlite file can … |
Vulnerable Vulnerable |
|
GHSA-4mq5-mj59-qq9c
Aliases: CVE-2019-10093 |
Allocation of Resources Without Limits or Throttling in Apache Tika In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml … |
Vulnerable Vulnerable |
|
GHSA-f58c-gq56-vjjf
Aliases: CVE-2025-66516 |
Apache Tika has XXE vulnerability Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1335
|
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to … | |
|
CVE-2016-6809
|
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika … | |
|
CVE-2018-8017
|
In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser. | |
|
CVE-2018-11796
|
Improper Restriction of XML External Entity Reference Tika reuses SAXParsers and calls `reset()` after each parse; the parser ignores entity … |