Apache Tika Pdf Parser Module (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-12-04. Vendor: Apache Software Foundation.

CVEs of Apache Tika Pdf Parser Module

• CVE-2025-66516 - CVSS 9.8 (critical), 2025-12-04: Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker…
• CVE-2025-54988 - CVSS 9.8 (critical), 2025-08-20: Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML…