Skip to main content
← Maven

org.apache.tika:tika

6 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6
Registry
Maven Central

Advisories 6

  • Incomplete fix and new regex DoS in StandardsExtractingContentHandler

    Affected: fixed in 1.28.4; from 2.0.0, fixed in 2.4.1.

  • Apache Tika BPGParser Memory Usage DoS

    Affected: fixed in 1.28.2; from 2.0.0, fixed in 2.4.0.

  • Infinite loop in Apache Tika's MP3 parser

    Affected: fixed in 1.26.

  • A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser.

    Affected: fixed in 1.24.1.

  • A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

    Affected: from 1.0, fixed in 1.24.

  • A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

    Affected: from 1.0, fixed in 1.24.