| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tika:tika-core | ≥ 1.7, < 1.22 | 1.22 |
| tika | ≥ 1.7, ≤ 1.21 |
A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free