Maven/org.apache.tika:tika-core CVE-2025-66516: critical 9.8, EPSS 88.98%
Apache Tika has XXE vulnerability
Action: Upgrade org.apache.tika:tika-core to 3.2.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13 | 3.2.2 | - |
Fixed versions
| 3.2.2 |
Sources
- osv: GHSA-f58c-gq56-vjjf
- nvd: CVE-2025-66516
- https://cve.org/CVERecord?id=CVE-2025-54988
- https://github.com/apache/tika
- https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k
CVE-2025-66516 · published · modified · JSON