Org.apache.tika:tika

This hub aggregates every CVE we track for Org.apache.tika:tika, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Org.apache.tika:tika.

• CVE-2022-33879Incomplete fix and new regex DoS in StandardsExtractingContentHandler3.3Jun 27, 2022
• CVE-2022-25169Apache Tika BPGParser Memory Usage DoS5.5May 16, 2022
• CVE-2021-28657Infinite loop in Apache Tika's MP3 parser5.5Mar 31, 2021
• CVE-2020-9489A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP...5.5Apr 27, 2020
• CVE-2020-1951A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.5.5Mar 23, 2020
• CVE-2020-1950A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.5.5Mar 23, 2020