Apache Tika

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apache_tika:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApache Tika (6070d541-3b37-5961-af1e-1ed8c63dee1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1950 vulnerable 2026-06-08 05:21:03.725004 Details available
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
Published: 2020-03-23T13:21:52.000Z
Updated: 2024-08-04T06:54:00.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10094 vulnerable 2026-06-08 05:12:22.232140 Details available
A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
Published: 2019-08-02T18:37:52.000Z
Updated: 2024-08-04T22:10:09.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10093 vulnerable 2026-06-08 05:12:22.231624 Details available
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.
Published: 2019-08-02T18:32:41.000Z
Updated: 2024-08-04T22:10:09.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10088 vulnerable 2026-06-08 05:12:22.214909 Details available
A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.
Published: 2019-08-02T18:53:19.000Z
Updated: 2024-08-04T22:10:09.443Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.