Apache Tika PDF parser module

2 results · Clear filters · Feed

• High 8.4
  CVE-2025-66516 Public exploit EPSS 89%

  Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

  Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the…

  Apache Software Foundation Apache Tika PDF parser module Apache Tika core Apache Tika parsers Debian Ubuntu Maven
  Dec 4, 2025
• High 8.4
  CVE-2025-54988 Public exploit EPSS 36%

  Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA

  Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensiti…

  Apache Software Foundation Apache Tika PDF parser module tika tika Debian Ubuntu Maven
  Aug 20, 2025