{"action":"Upgrade org.apache.tika:tika-core to 3.2.2 or later.","affected":[{"fixed":"3.2.2","introduced":"1.13"}],"component":"org.apache.tika:tika-core","cve_ids":["CVE-2025-66516"],"ecosystem":"Maven","epss":0.88976,"exploited":false,"fixed_versions":["3.2.2"],"ghsa_id":"GHSA-f58c-gq56-vjjf","id":"tcs_01M5N8V0S5YN6Z0JX0AAAFPDQ3","modified_at":"2025-12-05T03:42:51.706106Z","published_at":"2025-12-04T18:30:54Z","references":["https://osv.dev/vulnerability/GHSA-f58c-gq56-vjjf","https://nvd.nist.gov/vuln/detail/CVE-2025-66516","https://cve.org/CVERecord?id=CVE-2025-54988","https://github.com/apache/tika","https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f58c-gq56-vjjf","url":"https://osv.dev/vulnerability/GHSA-f58c-gq56-vjjf"},{"source":"nvd","source_id":"CVE-2025-66516","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66516"}],"summary":"Apache Tika has XXE vulnerability"}