CVE-2016-6809

Apache Tika prior to 1.14 is vulnerable to remote Java code execution via serialized objects embedded in MATLAB files. The root cause is native deserialization invoked through JMatIO, enabling an attacker to inject and execute code during object deserialization. Public references in the connected...

CVE-2021-23901

The CVE-2021-23901 issue affects Apache Nutch DmozParser prior to 1.18, where an XML External Entity (XXE) injection was exploitable due to improper XML processing. Affected component: DmozParser in Nutch versions

CVE-2026-41869

The Apache Nutch Server (Nutch REST API) is vulnerable to Missing Authorization , Improper Resource Shutdown , and Job Interruption in versions 1.10 through 1.22 . This flaw allows for unauthenticated forced shutdown and job interruption. To remediate, users are recommended to upgrade to version ...

CVE-2026-41870

The Apache Nutch Server (Nutch REST API) is vulnerable to unauthenticated remote code execution (RCE) via JEXL injection . This flaw is caused by missing authorization, improper control of code generation, and unsafe reflection when handling externally controlled input. The issue impacts Apache N...

CVE-2026-41871

Apache Nutch versions 1.10 through 1.22 are vulnerable to a Missing Authorization and Unsafe Reflection vulnerability within the Nutch Server (Nutch REST API) . The root cause involves the use of externally-controlled input to select classes or code, which can lead to unauthenticated reflection-b...