USN-8717-1: Apache Tika vulnerability

It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Tika subsequently parses could use this issue to read arbitrary files accessible to the Tika process and have their contents emitted into the extract...

CVE-2026-50645 vulnerabilities

Vulnerabilities for packages: apache-tika...

GHSA-GHVC-7HP8-2G2V vulnerabilities

Vulnerabilities for packages: apache-tika...

GHSA-GHVC-7HP8-2G2V vulnerabilities

Vulnerabilities for packages: wso2is, apache-tika-fips, apache-tika...

CVE-2026-50645 vulnerabilities

Vulnerabilities for packages: wso2is, apache-tika-fips, apache-tika...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: copybara, apache-hop-fips, nextflow, conductor-fips, opensearch, conductor, apache-hop, apache-tika, opensearch-fips, elasticsearch, copybara-fips, elasticsearch-fips, apache-tika-fips, spdx-tools-java, gradle, metabase, scala, wazuh-indexer, jbang...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: copybara, apache-hop-fips, nextflow, conductor-fips, opensearch, conductor, apache-hop, apache-tika, opensearch-fips, elasticsearch, copybara-fips, elasticsearch-fips, apache-tika-fips, spdx-tools-java, gradle, metabase, scala, wazuh-indexer, jbang...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, apache-tika, opensearch, gradle, nextflow...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, apache-tika, opensearch, gradle, nextflow...

CLSA-2026-1777596014 TuxCare security update for org.apache.tika (2 CVEs)

TuxCare rebuilt 108 org.apache.tika packages to address 2 CVEs. Fixed in 2.9.4-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-66755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can...

Linux Distros Unpatched Vulnerability : CVE-2026-66756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommende...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

DEBIAN-CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

UBUNTU-CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66756

CVE-2026-66756 affects Apache Tika, specifically the 4.0.0-alpha-1 series up to, but not including, 4.0.0-beta-1. The issue is described as an Improper Protection of Alternate Path vulnerability. Affected versions are listed as 4.0.0-alpha-1 through before 4.0.0-beta-1; the recommended remediatio...

EUVD-2026-51279

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...