Product · Apache Software Foundation

Apache Tika core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.4

CVE-2025-66516 Public exploit EPSS 89%

Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the…

Apache Software Foundation Apache Tika PDF parser module Apache Tika core Apache Tika parsers Debian Ubuntu Maven

Dec 4, 2025