Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-66756 EUVD-2026-51279GHSA-6m77-jgxr-wx9c

Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Tika

Description

Improper Protection of Alternate Path vulnerability in Apache Tika.

This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1.

Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Tika 4.0.0-alpha-1 – < 4.0.0-beta-1 4.0.0-beta-1

Advisories 1

References