Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.tika:tika-server

2 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium
Registry
Maven Central

Advisories 2

  • CVE-2026-66756Medium 6.9

    Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false

    Affected: from 4.0.0-alpha-1, fixed in 4.0.0-beta-1.

  • Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.

    Affected: fixed in 1.10.