Apache Tika
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_tika:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Tika (3968206b-c822-5569-aa30-288214df27f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-33879 |
vulnerable | 2026-06-08 05:44:51.287488 |
Incomplete fix and new regex DoS in StandardsExtractingContentHandler
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.
Published: 2022-06-27T21:40:10.000Z
Updated: 2024-08-03T08:09:22.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30973 |
vulnerable | 2026-06-08 05:43:39.905407 |
Missing fix for CVE-2022-30126 in 1.28.2
We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.
Published: 2022-05-31T13:20:10.000Z
Updated: 2024-08-03T07:03:40.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30126 |
vulnerable | 2026-06-08 05:43:36.998954 |
Apache Tika Regular Expression Denial of Service in Standards Extractor
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
Published: 2022-05-16T17:05:13.000Z
Updated: 2024-08-03T06:40:47.590Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25169 |
vulnerable | 2026-06-08 05:41:45.472130 |
Apache Tika BPGParser Memory Usage DoS
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
Published: 2022-05-16T17:05:11.000Z
Updated: 2024-08-03T04:36:05.111Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28657 |
vulnerable | 2026-06-08 05:31:24.694454 |
Infinite loop in Apache Tika's MP3 parser
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
Published: 2021-03-31T07:35:14.000Z
Updated: 2025-02-13T16:27:59.935Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8017 |
vulnerable | 2026-06-08 05:12:04.995114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1339 |
vulnerable | 2026-06-08 05:11:17.760432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1338 |
vulnerable | 2026-06-08 05:11:17.760096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1335 |
vulnerable | 2026-06-08 05:11:17.739405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17197 |
vulnerable | 2026-06-08 05:11:06.143121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11796 |
vulnerable | 2026-06-08 05:10:39.040779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11762 |
vulnerable | 2026-06-08 05:10:38.918169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11761 |
vulnerable | 2026-06-08 05:10:38.915640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.