Apache Tika vulnerabilities

• apache tika Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false CVE-2026-66756 6.9 MediumJuly 30, 2026
• apache tika Apache Tika: Arbitrary Local File Read in ISArchiveParser CVE-2026-66755 Fix available 5.9 MediumJuly 30, 2026
• apache tika, apache software foundation tika core, tika parsers +1 more +3 more Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected CVE-2025-66516 Public exploitFix available EPSS 89.0% 8.4 HighOctober 26, 2025
• apache tika, apache software foundation tika pdf parser module +1 more Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA CVE-2025-54988 Public exploitFix available EPSS 47.9% 8.4 HighAugust 20, 2025
• apache tika Incomplete fix and new regex DoS in StandardsExtractingContentHandler CVE-2022-33879 Fix available 3.3 LowJune 27, 2022
• apache tika Missing fix for CVE-2022-30126 in 1.28.2 CVE-2022-30973 Fix available 5.5 MediumMay 31, 2022
• apache tika, oracle primavera unifier +1 more Apache Tika Regular Expression Denial of Service in Standards Extractor CVE-2022-30126 Fix available 5.5 MediumMay 16, 2022
• apache tika, oracle primavera unifier +1 more Apache Tika BPGParser Memory Usage DoS CVE-2022-25169 Fix available 5.5 MediumMay 16, 2022
• jdom, apache solr, tika +3 more +5 more XML External Entity (XXE) Injection in JDOM CVE-2021-33813 Fix available EPSS 19.4% 7.5 HighJune 16, 2021
• apache tika, oracle communications messaging server, healthcare foundation +2 more +4 more Infinite loop in Apache Tika's MP3 parser CVE-2021-28657 Fix available 5.5 MediumMarch 31, 2021
• apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 more Missing Release of Memory after Effective Lifetime in Apache Tika CVE-2020-9489 Fix available 5.5 MediumApril 27, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Infinite Loop in Apache Tika CVE-2020-1951 Fix available 5.5 MediumMarch 23, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Uncontrolled Resource Consumption in Apache Tika CVE-2020-1950 Fix available 5.5 MediumMarch 23, 2020
• apache tika Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10088 Fix available 8.8 HighAugust 2, 2019
• apache tika Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10094 Fix available 7.8 HighAugust 2, 2019
• apache tika Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10093 Fix available 6.5 MediumAugust 2, 2019
• apache tika Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser CVE-2018-17197 Fix available 6.5 MediumDecember 24, 2018
• apache tika Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack CVE-2018-11796 Fix available 7.5 HighOctober 9, 2018
• apache tika Comparison errorr in org.apache.tika:tika-core CVE-2018-8017 Fix available 5.5 MediumSeptember 19, 2018
• apache tika Moderate severity vulnerability that affects org.apache.tika:tika-core CVE-2018-11762 Fix available 5.9 MediumSeptember 19, 2018
• apache tika, oracle business process management suite +1 more High severity vulnerability that affects org.apache.tika:tika-core CVE-2018-11761 Public exploitFix available 7.5 HighSeptember 19, 2018
• apache tika org.apache.tika:tika-parsers has an Infinite Loop vulnerability CVE-2018-1339 Fix available 5.5 MediumApril 25, 2018
• apache tika Moderate severity vulnerability that affects org.apache.tika:tika-core CVE-2018-1338 Fix available 5.5 MediumApril 25, 2018
• apache tika Command injection in org.apache.tika:tika-core CVE-2018-1335 Public exploitFix available EPSS 93.6% 8.1 HighApril 25, 2018
• apache tika Apache Tika does not properly initialize the XML parser or choose handlers CVE-2016-4434 Fix available 7.8 HighSeptember 29, 2017
• apache tika, nutch +1 more Apache Tika allows Java code execution for serialized objects embedded in MATLAB files CVE-2016-6809 Fix available 9.8 CriticalApril 6, 2017
• apache tika Apache Tika Server exposes sensitive information CVE-2015-3271 Fix available 5.3 MediumDecember 15, 2016