XXE (XML External Entity Injection) Tika Dependency Vulnerability in Crucible Server and Fisheye Server

This Crucible Server and Fisheye Server release includes updates to our Apache Tika dependency in response to CVE-2025-66516. Our security team has assessed that the current scope of this CVE does not present the same critical risk in our products, as our use of the dependency doesn’t support the...