| CVE-2026-66756 |
Improper Protection of Alternate Path vulnerability in Apache Tika
|
6.9
Medium
|
Jul 30, 2026 |
| CVE-2026-66755 |
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and…
|
5.9
Medium
|
Jul 30, 2026 |
| CVE-2022-33879 |
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were…
|
Not rated
|
Jun 27, 2022 |
| CVE-2022-30973 |
We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release
|
Not rated
|
May 31, 2022 |
| CVE-2022-30126 |
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could…
|
Not rated
|
May 16, 2022 |
| CVE-2022-25169 |
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on…
|
Not rated
|
May 16, 2022 |
| CVE-2021-28657 |
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25
|
Not rated
|
Mar 31, 2021 |
| CVE-2018-17197 |
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions…
|
Not rated
|
Dec 24, 2018 |
| CVE-2018-11796 |
In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing
|
Not rated
|
Oct 9, 2018 |
| CVE-2018-8017 |
In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-11762 |
In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline…
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-11761 |
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-1335 |
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to…
|
Not rated
|
Apr 25, 2018 |
| CVE-2018-1339 |
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache…
|
Not rated
|
Apr 25, 2018 |
| CVE-2018-1338 |
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache…
|
Not rated
|
Apr 25, 2018 |