Skip to content
OpenAdvisories

Package · Maven

org.apache.tika:tika-core

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2025-66516 Public exploit Scanner template EPSS 89%

    Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

    Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the…

    Apache Software Foundation Apache Tika PDF parser module Apache Tika core Apache Tika parsers Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2018-11761 Public exploit

    High severity vulnerability that affects org.apache.tika:tika-core

    In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.

    Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  • High 8.1
    CVE-2018-1335 Public exploit Scanner template EPSS 94%

    Command injection in org.apache.tika:tika-core

    From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a se…

    Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven