Maven/org.apache.tika:tika-parsers CVE-2025-66516: critical 9.8, EPSS 88.98%
Apache Tika has XXE vulnerability
Action: Upgrade org.apache.tika:tika-parsers to 2.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-f58c-gq56-vjjf#Maven/org.apache.tika:tika-parsers
- nvd: CVE-2025-66516
- https://cve.org/CVERecord?id=CVE-2025-54988
- https://github.com/apache/tika
- https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k
CVE-2025-66516 · published · modified · JSON