Comparison errorr in org.apache.tika:tika-core

MEDIUM 5.5CVE-2018-8017 · GHSA-j53j-gmr9-h8g3 · Published 19/09/2018 · updated 17/06/2026

In short

CVE-2018-8017 is a MEDIUM (CVSS 5.5) vulnerability affecting org.apache.tika:tika-core, tika (apache).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.2% of all vulnerabilities.
Fix: update to 1.19 or later.

Package	Affected versions	Patched versions
org.apache.tika:tika-core Maven	`≥ 1.2, < 1.19`	`1.19`
tika apache	`≥ 1.2, ≤ 1.18`	No fix yet

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

NVD description

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.2, < 1.19

1.19

≥ 1.2, ≤ 1.18

No fix yet

More vulnerabilities in org.apache.tika:tika-core

See all →