CVE-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.tika:tika-parser-scientific-module",
    "product": "Apache Tika",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.3.2",
        "status": "affected",
        "version": "1.8",
        "versionType": "semver"
      },
      {
        "lessThan": "4.0.0-beta-1",
        "status": "affected",
        "version": "4.0.0-alpha-1",
        "versionType": "semver"
      }
    ]
  }
]