Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tika/tika-parsers@1.26
purl pkg:maven/org.apache.tika/tika-parsers@1.26
Next non-vulnerable version 2.4.1
Latest non-vulnerable version 2.4.1
Risk score 10.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-p72g-pv48-7w9x
Aliases:
CVE-2025-54988
Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika …
2.0.0-ALPHA
Vulnerable
CVE-2022-33879

Inefficient Regular Expression Complexity The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we …
1.28.4
Vulnerable
2.4.1
Not vulnerable
GHSA-f58c-gq56-vjjf
Aliases:
CVE-2025-66516
Apache Tika has XXE vulnerability Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all …
2.0.0
Vulnerable
2.0.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2021-28657
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's …