Known vulnerabilities in tika (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
tika (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:tika_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
7
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144802 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-66755 |
CWE-22 | Medium | 1.22-1ubuntu0.1~esm3, 1.22-2+deb11u1ubuntu0.1~esm2 | 24.08.2026 |
SB20260824141 SB2026090359 |
||
| #VU114385 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-54988 |
CWE-611 | Medium | 1.22-1ubuntu0.1~esm2, 1.22-2+deb11u1build0.22.04.1 | 22.08.2025 |
SB2025082219 SB2025083007 SB2025083008 and 33 more |
||
| #VU64724 - Incorrect Regular Expression CVE-2022-33879 |
CWE-185 | Medium | 1.22-1ubuntu0.1~esm1, 1.22-2ubuntu0.22.04.1~esm1 | 28.06.2022 |
SB2022062801 SB2022072805 SB2022092035 and 18 more |
||
| #VU63904 - Improper input validation CVE-2022-30973 |
CWE-20 | Medium | 1.22-1ubuntu0.1~esm1, 1.22-2ubuntu0.22.04.1~esm1 | 01.06.2022 |
SB2022060114 SB2022072805 SB2022092035 and 6 more |
||
| #VU63404 - Incorrect Regular Expression CVE-2022-30126 |
CWE-185 | Medium | 1.22-1ubuntu0.1~esm1, 1.22-2ubuntu0.22.04.1~esm1 | 18.05.2022 |
SB2022051837 SB2022062703 SB2022062804 and 11 more |
||
| #VU26470 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-1951 |
CWE-835 | Medium | 1.22-1ubuntu0.1~esm1, 1.22-2ubuntu0.22.04.1~esm1 | 31.03.2020 |
SB2020033108 SB2020071605 SB2020102927 and 3 more |
||
| #VU26469 - Resource exhaustion CVE-2020-1950 |
CWE-400 | Medium | 1.22-1ubuntu0.1~esm1, 1.22-2ubuntu0.22.04.1~esm1 | 31.03.2020 |
SB2020033108 SB2020100523 SB2025052944 |