{"action":"Upgrade org.apache.tika:tika-core to 1.28.2 (1.x) or 2.4.0 (2.x) or later.","affected":[{"fixed":"1.28.2","introduced":"1.17"},{"fixed":"2.4.0","introduced":"2.0.0"}],"component":"org.apache.tika:tika-core","cve_ids":["CVE-2022-30126"],"ecosystem":"Maven","epss":0.02598,"exploited":false,"fixed_versions":["1.28.2","2.4.0"],"ghsa_id":"GHSA-rpjm-422r-95mh","id":"tcs_01M5N9C827NAB65KTV23W8FW0Z","modified_at":"2025-09-02T22:38:47.051749Z","published_at":"2022-05-17T00:00:37Z","references":["https://osv.dev/vulnerability/GHSA-rpjm-422r-95mh","https://nvd.nist.gov/vuln/detail/CVE-2022-30126","https://github.com/apache/tika/commit/83b0de4d60161ebd4bc224141a959ac8c18d95f4","https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265","https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51","https://github.com/advisories/GHSA-qw3f-w4pf-jh5f","https://github.com/apache/tika","https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4","https://security.netapp.com/advisory/ntap-20220624-0004","https://www.oracle.com/security-alerts/cpujul2022.html","http://www.openwall.com/lists/oss-security/2022/05/16/3","http://www.openwall.com/lists/oss-security/2022/05/31/2","http://www.openwall.com/lists/oss-security/2022/06/27/5"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-rpjm-422r-95mh","url":"https://osv.dev/vulnerability/GHSA-rpjm-422r-95mh"}],"summary":"Regular expression denial of service in apache tika"}