Apache Tika (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-03-23. Vendor: Apache.

CVEs of Apache Tika

• CVE-2020-1950 - CVSS 5.5 (medium), 2020-03-23: A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
• CVE-2019-10093 - CVSS 6.5 (medium), 2019-08-02: In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache…
• CVE-2019-10088 - CVSS 8.8 (high), 2019-08-02: A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.
• CVE-2019-10094 - CVSS 7.8 (high), 2019-08-02: A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's…