| Bug | bullseye | sid | Description |
|---|
| CVE-2026-66755 | vulnerable | vulnerable | Relative Path Traversal in the ISA-Tab parser in Apache Software Found ... |
| CVE-2025-66516 | fixed | vulnerable | Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2 ... |
| CVE-2025-54988 | fixed | vulnerable | Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1. ... |
| CVE-2022-33879 | vulnerable (no DSA) | vulnerable | The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in ... |
| CVE-2022-30126 | vulnerable (no DSA) | vulnerable | In Apache Tika, a regular expression in our StandardsText class, used ... |
| CVE-2022-25169 | vulnerable (no DSA) | vulnerable | The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may ... |
| CVE-2021-28657 | vulnerable (no DSA) | vulnerable | A carefully crafted or corrupt file may trigger an infinite loop in Ti ... |
| CVE-2020-9489 | vulnerable (no DSA) | vulnerable | A carefully crafted or corrupt file may trigger a System.exit in Tika' ... |
| Bug | Description |
|---|
| CVE-2026-66756 | Improper Protection of Alternate Path vulnerability in Apache Tika. T ... |
| CVE-2022-30973 | We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the ... |
| CVE-2020-1951 | A carefully crafted or corrupt PSD file can cause an infinite loop in ... |
| CVE-2020-1950 | A carefully crafted or corrupt PSD file can cause excessive memory usa ... |
| CVE-2019-10094 | A carefully crafted package/compressed file that, when unzipped/uncomp ... |
| CVE-2019-10093 | In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file ... |
| CVE-2019-10088 | A carefully crafted or corrupt zip file can cause an OOM in Apache Tik ... |
| CVE-2018-17197 | A carefully crafted or corrupt sqlite file can cause an infinite loop ... |
| CVE-2018-11796 | In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion lim ... |
| CVE-2018-11762 | In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not ... |
| CVE-2018-11761 | In Apache Tika 0.1 to 1.18, the XML parsers were not configured to lim ... |
| CVE-2018-8017 | In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an in ... |
| CVE-2018-1339 | A carefully crafted (or fuzzed) file can trigger an infinite loop in A ... |
| CVE-2018-1338 | A carefully crafted (or fuzzed) file can trigger an infinite loop in A ... |
| CVE-2018-1335 | From Apache Tika versions 1.7 to 1.17, clients could send carefully cr ... |
| CVE-2016-6809 | Apache Tika before 1.14 allows Java code execution for serialized obje ... |
| CVE-2016-4434 | Apache Tika before 1.13 does not properly initialize the XML parser or ... |
| CVE-2015-3271 | Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow re ... |